Skip to content
OpenAdvisories
High WID-SEC-2026-2998 5 CVEs

ZScaler Client Connector: Mehrere Schwachstellen

Published Aug 24, 2026 · Updated Aug 24, 2026 · de-DE

Vendor: Zscaler Product: Client Connector

Summary

Ein Angreifer kann mehrere Schwachstellen in ZScaler Client Connector ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen oder einen Denial-of-Service-Zustand auszulösen.

Product

Zscaler Client Connector, ehemals Zscaler App (Z App) führt Sicherheits- und Richtlinienkontrollen auf verwalteten Endgeräten durch.

Vulnerabilities 5

  • Critical 9.1
    CVE-2026-59564

    Authentication bypass between ZCC and client connector portal

    An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.

    Zscaler Client Connector
  • Critical 9.1
    CVE-2026-59568

    Remote Code Execution

    Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

    Zscaler Client Connector
  • High 8.8
    CVE-2026-59565

    Local and kernel denial-of-service

    A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.

    Zscaler Client Connector
  • High 8.8
    CVE-2026-59567

    Local privilege escalation

    Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context.

    Zscaler Client Connector
  • High 8.4
    CVE-2026-59566

    Local denial-of-service

    A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS.

    Zscaler Client Connector

Revision history

  1. #1

    Initiale Fassung

References