Zscaler vulnerabilities

CVEs per yearBy the year they were published

1. 202317
2. 202420
3. 20253
4. 202613

Newest CVEs

• CVE-2026-59563

  HMAC Confirmation Token Unbinding in zscaler-mcp-server

  Zscaler · zscaler-mcp-server

  Medium4.6
• CVE-2026-25684

  File Type Control rule bypass

  Zscaler · ZIA File Type Control

  Medium4.4
• CVE-2026-59570

  Android ZCC denial of service

  Zscaler · Client Connector

  High7.5
• CVE-2026-59569

  Android ZCC VPN API method privilege escalation

  Zscaler · Client Connector

  High8.1
• CVE-2026-25687

  ZCC race condition in ZPA tunnel handler

  Zscaler · Client Connector

  High8.1
• CVE-2026-59568

  Remote Code Execution

  Zscaler · Client Connector

  Critical9.1
• CVE-2026-59567

  Local privilege escalation

  Zscaler · Client Connector

  High8.8
• CVE-2026-59566

  Local denial-of-service

  Zscaler · Client Connector

  High8.4
• CVE-2026-59565

  Local and kernel denial-of-service

  Zscaler · Client Connector

  High8.8
• CVE-2026-59564

  Authentication bypass between ZCC and client connector portal

  Zscaler · Client Connector

  Critical9.1