CVE Intelligence

Vulnerabilidades do Zscaler Client Connector

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Zscaler Client Connector: 7 registro(s), com versões afetadas e correções.
cpe:2.3:a:zscaler:client_connector

CVE-2026-59568 Crítica · 9.1 CWE-20 24/08/2026
Remote Code Execution
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.
CVE-2026-59567 Alta · 8.8 CWE-280 24/08/2026
Local privilege escalation
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context.
CVE-2026-59566 Alta · 8.4 CWE-229 24/08/2026
Local denial-of-service
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS.
CVE-2026-59565 Alta · 8.8 CWE-229 24/08/2026
Local and kernel denial-of-service
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.
CVE-2026-59564 Crítica · 9.1 CWE-304 24/08/2026
Authentication bypass between ZCC and client connector portal
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.
CVE-2026-22569 Média · 5.3 CWE-1289 31/03/2026
Incorrect startup configuration in ZCC
An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances.
CVE-2025-54983 Média · 5.2 CWE-772 12/11/2025
Health check port on ZCC allows tunnel bypass
A health check port on Zscaler Client Connector on Windows, versions 4.6 < 4.6.0.216 and 4.7 < 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls.