Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,956All CVEsplus 19,141 rejected
- 254Last 24 hours3,184 in the last 7 days
- 16,914Last 30 days1,564 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 7 | 4 | 0 | 0 | 13 | 57 |
| 2025 | 1 | 1 | 1 | 0 | 0 | 3 | 44 |
| 2024 | 0 | 12 | 7 | 1 | 0 | 20 | 41 |
| 2023 | 1 | 7 | 9 | 0 | 0 | 17 | 21 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2021 | 1 | 3 | 0 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-59563 | HMAC Confirmation Token Unbinding in zscaler-mcp-serverZscaler · zscaler-mcp-server | Medium4.6 |
| CVE-2026-25684 | File Type Control rule bypassZscaler · ZIA File Type Control | Medium4.4 |
| CVE-2026-59570 | Android ZCC denial of serviceZscaler · Client Connector | High7.5 |
| CVE-2026-59569 | Android ZCC VPN API method privilege escalationZscaler · Client Connector | High8.1 |
| CVE-2026-25687 | ZCC race condition in ZPA tunnel handlerZscaler · Client Connector | High8.1 |
| CVE-2026-59568 | Remote Code ExecutionZscaler · Client Connector | Critical9.1 |
| CVE-2026-59567 | Local privilege escalationZscaler · Client Connector | High8.8 |
| CVE-2026-59566 | Local denial-of-serviceZscaler · Client Connector | High8.4 |
| CVE-2026-59565 | Local and kernel denial-of-serviceZscaler · Client Connector | High8.8 |
| CVE-2026-59564 | Authentication bypass between ZCC and client connector portalZscaler · Client Connector | Critical9.1 |
| CVE-2026-22569 | Incorrect startup configuration in ZCCZscaler · Zscaler Client Connector | Medium5.4 |
| CVE-2026-22567 | ZIA Admin UI Input Validation BugZscaler · ZIA Admin UI | High7.6 |
| CVE-2026-22568 | Unauthorized information retrieval in ZIA Admin UIZscaler · ZIA Admin UI | Medium5.5 |
| CVE-2025-54983 | Health check port on ZCC allows tunnel bypassZscaler · Zscaler Client Connector | Medium5.2 |
| CVE-2025-54982 | SAML 2.0 Public Key Validation IssueZscaler · Authentication Server | Critical9.6 |
| CVE-2024-31127 | MacOS Zscaler Client Connector Local Privilege EscalationZscaler · Client Connector | High7.3 |
| CVE-2023-28806 | Signature validation error in DLL allows disabling anti-tampering protectionZscaler · Client Connector | Medium5.7 |
| CVE-2024-23483 | Local Privilege Escalation via lack of input validationZscaler · Client Connector | High7.0 |
| CVE-2024-23460 | Incorrect signature validation of packageZscaler · Client Connector | Medium6.4 |
| CVE-2024-23464 | Zscaler bypass with administrative privileges on WindowsZscaler · Client Connector | High7.2 |
| CVE-2024-23458 | Local Privilege Escalation on Zscaler Client Connector on WindowsZscaler · Client Connector | High7.3 |
| CVE-2024-23456 | Signature validation issue leads to Anti-Tampering bypassZscaler · Client Connector | High7.8 |
| CVE-2024-23462 | ZCC Mac validinstaller file integrity check missingZscaler · Client Connector | Low3.3 |
| CVE-2024-23461 | ZCC macOS Upgrade ZIP Bomb DoSZscaler · Client Connector | Medium4.2 |
| CVE-2024-23459 | Multiple Arbitrary Creates/Overwrites by link followingZscaler · Client Connector | High7.1 |
| CVE-2023-41971 | Windows ZCC Upgrade DoS And Privilege Escalation Through RPC ControlZscaler · Client Connector | Medium5.3 |
| CVE-2023-41970 | Repair App local code execution with arbitrary privilegesZscaler · Client Connector | Medium6.0 |
| CVE-2023-28798 | Out-of-bounds write to heap in pacparserZscaler · Client Connector | Medium6.5 |
| CVE-2024-23480 | Insecure MacOS code sign check fallbackZscaler · Client Connector | High7.5 |
| CVE-2024-23457 | Anti-tampering can be disabled with uninstall password enforcedZscaler · Client Connector | High7.8 |
| CVE-2024-23463 | Anti-Tampering bypass via Repair App functionalityZscaler · Client Connector | High8.8 |
| CVE-2024-23482 | ZScalerService Local Privilege EscalationZscaler · Client Connector | High7.0 |
| CVE-2023-41973 | Lack of input santization on Zscaler Client Connector enables arbitrary code executionZscaler · Client Connector | High7.3 |
| CVE-2023-41972 | Revert password check incorrect type validationZscaler · Client Connector | High7.3 |
| CVE-2023-41969 | ZSATrayManager Arbitrary File DeletionZscaler · Client Connector | High7.3 |
| CVE-2023-28807 | Bypass of ZIA domain fronting detection module through evasion techniqueZscaler · ZIA | Medium5.1 |
| CVE-2023-28802 | Disable Zscaler using machine tunnel restartZscaler · Client Connector | Medium4.9 |
| CVE-2023-28794 | PAC Files Exposed to Internet WebsitesZscaler · Client Connector | Medium4.3 |
| CVE-2023-28805 | ZCC on Linux privilege escalationZscaler · Client Connector | Medium6.7 |
| CVE-2023-28804 | Linux ZCC allows unsigned updates, allowing elevated Code ExecutionZscaler · Client Connector | High8.2 |
| CVE-2023-28803 | Traffic being bypassed by ZCC by configuring synthetic IP range as local networkZscaler · Client Connector | Medium5.9 |
| CVE-2023-28797 | LPE using arbitrary file delete with SymlinksZscaler · Client Connector | Medium6.3 |
| CVE-2023-28796 | IPC Bypass Through PLT Section in ELFZscaler · Client Connector | High7.1 |
| CVE-2023-28795 | Client IPC validation bypassZscaler · Client Connector | High7.8 |
| CVE-2023-28793 | Heap Based Buffer Overflow in LibraryZscaler · Client Connector | High7.8 |
| CVE-2021-26738 | Privilege Escalation for ZCC macOS via PATH VariableZscaler · Client Connector | High7.8 |
| CVE-2021-26737 | Privilege Escalation Using PID Reuse in ZCC macOSZscaler · Client Connector | Medium5.5 |
| CVE-2021-26736 | ZApp Installer Privilege Escalation VulnerabilitiesZscaler · Client Connector | Medium6.7 |
| CVE-2021-26735 | Untrusted Search Path While Executing REG DELETE by UninstallerZscaler · Client Connector | Medium6.7 |
| CVE-2021-26734 | Junction Delete leading to elevation of privilegeZscaler · Client Connector | Medium4.4 |