Vendor
Zscaler vulnerabilities
52 advisories tracked, 0 exploited in the wild according to CISA, 11 published in 2026.
Data refreshed 13 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
Nothing from Zscaler meets this bar right now: no CVE in CISA's exploited list, and none with a high exploitation score.
Products covered
Select a product to see only its advisories.
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2026-59570 | Client Connector | Android ZCC denial of service | HIGH 7.5 | 0.13% | – | |
| CVE-2026-59569 | Client Connector | Android ZCC VPN API method privilege escalation | HIGH 8.1 | 0.18% | – | |
| CVE-2026-25687 | Client Connector | ZCC race condition in ZPA tunnel handler | HIGH 8.1 | 0.38% | – | |
| CVE-2026-59564 | Client Connector | Authentication bypass between ZCC and client connector portal | CRITICAL 9.1 | 0.53% | – | |
| CVE-2026-59565 | Client Connector | Local and kernel denial-of-service | HIGH 8.8 | 0.48% | – | |
| CVE-2026-59566 | Client Connector | Local denial-of-service | HIGH 8.4 | 0.18% | – | |
| CVE-2026-59567 | Client Connector | Local privilege escalation | HIGH 8.8 | 0.15% | – | |
| CVE-2026-59568 | Client Connector | Remote Code Execution | CRITICAL 9.1 | 0.66% | – | |
| CVE-2026-22569 | Client Connector | Incorrect startup configuration in ZCC | MEDIUM 5.4 | 0.18% | – | |
| CVE-2026-22567 | ZIA, ZPA and connectors | ZIA Admin UI Input Validation Bug | HIGH 7.6 | 0.20% | – | |
| CVE-2026-22568 | ZIA, ZPA and connectors | Unauthorized information retrieval in ZIA Admin UI | MEDIUM 5.5 | 0.17% | – | |
| CVE-2025-54983 | Client Connector | Health check port on ZCC allows tunnel bypass | MEDIUM 5.2 | 0.13% | – | |
| CVE-2025-54982 | ZIA, ZPA and connectors | SAML 2.0 Public Key Validation Issue | CRITICAL 9.6 | 0.40% | – | |
| CVE-2024-31127 | Client Connector | MacOS Zscaler Client Connector Local Privilege Escalation | HIGH 7.3 | 0.10% | – | |
| CVE-2023-28806 | Client Connector | Signature validation error in DLL allows disabling anti-tampering protection | MEDIUM 5.7 | 0.19% | – | |
| CVE-2024-23483 | Client Connector | Local Privilege Escalation via lack of input validation | HIGH 7 | 0.75% | – | |
| CVE-2024-23460 | Client Connector | Incorrect signature validation of package | MEDIUM 6.4 | 0.13% | – | |
| CVE-2024-23464 | Client Connector | Zscaler bypass with administrative privileges on Windows | HIGH 7.2 | 0.43% | – | |
| CVE-2024-23458 | Client Connector | Local Privilege Escalation on Zscaler Client Connector on Windows | HIGH 7.3 | 0.11% | – | |
| CVE-2024-23456 | Client Connector | Signature validation issue leads to Anti-Tampering bypass | HIGH 7.8 | 0.23% | – | |
| CVE-2024-23462 | Client Connector | ZCC Mac validinstaller file integrity check missing | LOW 3.3 | 0.19% | – | |
| CVE-2024-23461 | Client Connector | ZCC macOS Upgrade ZIP Bomb DoS | MEDIUM 4.2 | 0.11% | – | |
| CVE-2024-23459 | Client Connector | Multiple Arbitrary Creates/Overwrites by link following | HIGH 7.1 | 0.47% | – | |
| CVE-2023-41971 | Client Connector | Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control | MEDIUM 5.3 | 0.19% | – | |
| CVE-2023-41970 | Client Connector | Repair App local code execution with arbitrary privileges | MEDIUM 6 | 0.11% | – | |
| CVE-2023-28798 | Client Connector | Out-of-bounds write to heap in pacparser | MEDIUM 6.5 | 0.43% | – | |
| CVE-2024-23480 | Client Connector | Insecure MacOS code sign check fallback | HIGH 7.5 | 0.30% | – | |
| CVE-2024-23457 | Client Connector | Anti-tampering can be disabled with uninstall password enforced | HIGH 7.8 | 0.20% | – | |
| CVE-2024-23463 | Client Connector | Anti-Tampering bypass via Repair App functionality | HIGH 8.8 | 0.37% | – | |
| CVE-2024-23482 | Client Connector | ZScalerService Local Privilege Escalation | HIGH 7 | 0.27% | – | |
| CVE-2023-41973 | Client Connector | Lack of input santization on Zscaler Client Connector enables arbitrary code execution | HIGH 7.3 | 0.31% | – | |
| CVE-2023-41972 | Client Connector | Revert password check incorrect type validation | HIGH 7.3 | 0.24% | – | |
| CVE-2023-41969 | Client Connector | ZSATrayManager Arbitrary File Deletion | HIGH 7.3 | 0.31% | – | |
| CVE-2023-28807 | ZIA, ZPA and connectors | Bypass of ZIA domain fronting detection module through evasion technique | MEDIUM 5.1 | 0.34% | – | |
| CVE-2023-28802 | Client Connector | Disable Zscaler using machine tunnel restart | MEDIUM 4.9 | 0.23% | – | |
| CVE-2023-28794 | Client Connector | PAC Files Exposed to Internet Websites | MEDIUM 4.3 | 0.20% | – | |
| CVE-2023-28805 | Client Connector | ZCC on Linux privilege escalation | MEDIUM 6.7 | 0.35% | – | |
| CVE-2023-28804 | Client Connector | Linux ZCC allows unsigned updates, allowing elevated Code Execution | HIGH 8.2 | 0.24% | – | |
| CVE-2023-28803 | Client Connector | Traffic being bypassed by ZCC by configuring synthetic IP range as local network | MEDIUM 5.9 | 0.26% | – | |
| CVE-2023-28797 | Client Connector | LPE using arbitrary file delete with Symlinks | MEDIUM 6.3 | 0.22% | – | |
| CVE-2023-28796 | Client Connector | IPC Bypass Through PLT Section in ELF | HIGH 7.1 | 0.18% | – | |
| CVE-2023-28795 | Client Connector | Client IPC validation bypass | HIGH 7.8 | 0.15% | – | |
| CVE-2023-28793 | Client Connector | Heap Based Buffer Overflow in Library | HIGH 7.8 | 0.30% | – | |
| CVE-2021-26738 | Client Connector | Privilege Escalation for ZCC macOS via PATH Variable | HIGH 7.8 | 0.23% | – | |
| CVE-2021-26737 | Client Connector | Privilege Escalation Using PID Reuse in ZCC macOS | MEDIUM 5.5 | 0.11% | – | |
| CVE-2021-26736 | Client Connector | ZApp Installer Privilege Escalation Vulnerabilities | MEDIUM 6.7 | 0.22% | – | |
| CVE-2021-26735 | Client Connector | Untrusted Search Path While Executing REG DELETE by Uninstaller | MEDIUM 6.7 | 0.13% | – | |
| CVE-2021-26734 | Client Connector | Junction Delete leading to elevation of privilege | MEDIUM 4.4 | 0.14% | – | |
| CVE-2023-28801 | ZIA, ZPA and connectors | Improper SAML signature verification | CRITICAL 9.6 | 0.39% | – | |
| CVE-2023-28800 | Client Connector | Output encoding missing in redrurl parameter | HIGH 8.1 | 0.55% | – | |
| CVE-2023-28799 | Client Connector | A URL parameter during login flow was vulnerable to injection. | HIGH 8.2 | 0.45% | – | |
| CVE-2020-11635 | Client Connector | The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local… | – | 0.44% | – |
Sources: Zscaler security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.