CVE Intelligence

Zscaler Zscaler-mcp-server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Zscaler Zscaler-mcp-server: 1 record(s), with affected versions and fixes.

CVE-2026-59563 Medium · 4.6 CWE-305 Sep 28, 2026
HMAC Confirmation Token Unbinding in zscaler-mcp-server
Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2.