Zscaler vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-59570 On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture.High 7.5 · Sep 14, 2026
• CVE-2026-59569 An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls.High 8.1 · Sep 14, 2026
• CVE-2026-25687 A race condition in the ZPA tunnel handler of affected versions of Zscaler Client Connector (ZCC) allows a heap corruption, resulting in a denial of service (clHigh 8.1 · Sep 14, 2026
• CVE-2026-59568 Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability Critical 9.1 · Aug 24, 2026
• CVE-2026-59567 Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute aHigh 8.8 · Aug 24, 2026
• CVE-2026-59566 A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS.High 8.4 · Aug 24, 2026
• CVE-2026-59565 A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.High 8.8 · Aug 24, 2026
• CVE-2026-59564 An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.Critical 9.1 · Aug 24, 2026
• CVE-2026-22567 Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fHigh 7.6 · Feb 23, 2026
• CVE-2025-54982 An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse.Critical 9.6 · Aug 5, 2025
• CVE-2024-31127 An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may allow a local attacker to elevate their privileges.High 7.3 · Jun 4, 2025
• CVE-2024-23483 An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection.High 7 · Aug 6, 2024
• CVE-2024-23464 In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights.High 7.2 · Aug 6, 2024
• CVE-2024-23458 While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilegHigh 7.3 · Aug 6, 2024
• CVE-2024-23456 Anti-tampering can be disabled under certain conditions without signature validation.High 7.8 · Aug 6, 2024
• CVE-2024-23459 An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This iHigh 7.1 · May 2, 2024
• CVE-2024-23480 A fallback mechanism in code sign checking on macOS may allow arbitrary code execution.High 7.5 · May 1, 2024
• CVE-2024-23457 The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninstall password is enforced.High 7.8 · May 1, 2024
• CVE-2024-23463 Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repair App functionality.High 8.8 · Apr 30, 2024
• CVE-2024-23482 The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process.High 7 · Mar 26, 2024
• CVE-2023-41973 ZSATray passes the previousInstallerName as a config parameter to TrayManager, and TrayManager constructs the path and appends previousInstallerName to get the High 7.3 · Mar 26, 2024
• CVE-2023-41972 In some rare cases, there is a password type validation missing in Revert Password check and for some features it could be disabled.High 7.3 · Mar 26, 2024
• CVE-2023-41969 An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modifHigh 7.3 · Mar 26, 2024
• CVE-2023-28804 An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux ClientHigh 8.2 · Oct 23, 2023
• CVE-2023-28796 Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injection.High 7.1 · Oct 23, 2023