ZZscaler

Products

Exploited and recent CVEs

• CVE-2026-59563 Medium 4.6 HMAC Confirmation Token Unbinding in zscaler-mcp-server 0.1%
• CVE-2026-25684 Medium 4.4 File Type Control rule bypass 0.2%
• CVE-2026-59570 High 7.5 Android ZCC denial of service 0.1%
• CVE-2026-59569 High 8.1 Android ZCC VPN API method privilege escalation 0.2%
• CVE-2026-25687 High 8.1 ZCC race condition in ZPA tunnel handler 0.4%
• CVE-2026-59568 Critical 9.1 Remote Code Execution 0.7%
• CVE-2026-59567 High 8.8 Local privilege escalation 0.1%
• CVE-2026-59566 High 8.4 Local denial-of-service 0.2%
• CVE-2026-59565 High 8.8 Local and kernel denial-of-service 0.5%
• CVE-2026-59564 Critical 9.1 Authentication bypass between ZCC and client connector portal 0.5%
• CVE-2026-22569 Medium 5.4 Incorrect startup configuration in ZCC 0.2%
• CVE-2026-22567 High 7.6 ZIA Admin UI Input Validation Bug 0.2%
• CVE-2026-22568 Medium 5.5 Unauthorized information retrieval in ZIA Admin UI 0.2%
• CVE-2025-54983 Medium 5.2 Health check port on ZCC allows tunnel bypass 0.1%
• CVE-2025-54982 Critical 9.6 SAML 2.0 Public Key Validation Issue 0.4%
• CVE-2024-31127 High 7.3 MacOS Zscaler Client Connector Local Privilege Escalation 0.1%
• CVE-2023-28806 Medium 5.7 Signature validation error in DLL allows disabling anti-tampering protection 0.2%
• CVE-2024-23483 High 7.0 Local Privilege Escalation via lack of input validation 0.7%
• CVE-2024-23460 Medium 6.4 Incorrect signature validation of package 0.1%
• CVE-2024-23464 High 7.2 Zscaler bypass with administrative privileges on Windows 0.4%
• CVE-2024-23458 High 7.3 Local Privilege Escalation on Zscaler Client Connector on Windows 0.1%
• CVE-2024-23456 High 7.8 Signature validation issue leads to Anti-Tampering bypass 0.2%
• CVE-2024-23462 Low 3.3 ZCC Mac validinstaller file integrity check missing 0.2%
• CVE-2024-23461 Medium 4.2 ZCC macOS Upgrade ZIP Bomb DoS 0.1%
• CVE-2024-23459 High 7.1 Multiple Arbitrary Creates/Overwrites by link following 0.5%
• CVE-2023-41971 Medium 5.3 Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control 0.2%
• CVE-2023-41970 Medium 6.0 Repair App local code execution with arbitrary privileges 0.1%
• CVE-2023-28798 Medium 6.5 Out-of-bounds write to heap in pacparser 0.4%
• CVE-2024-23480 High 7.5 Insecure MacOS code sign check fallback 0.3%
• CVE-2024-23457 High 7.8 Anti-tampering can be disabled with uninstall password enforced 0.2%