Skip to content
OpenAdvisories
Medium VA-26-092-02 1 CVE

Zscaler Client Connector hard-coded proxy configuration domain

Published Apr 2, 2026 · Updated Apr 23, 2026 · Revision 2

Vendor: Zscaler Product: Client Connector

Summary

Zscaler Client Connector 4.7 and 4.8 on Microsoft Windows misspell a domain that is added by default to an internal bypass list. This could lead to a limited amount of traffic from being inspected under specific circumstances.

Vulnerabilities 1

  • Medium 5.4
    CVE-2026-22569

    Incorrect startup configuration in ZCC

    An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances.

    Zscaler Zscaler Client Connector

Revision history

  1. #1.1.0

    Updated description and publish date

  2. #1.0.0

    Initial publication