Skip to content
OpenAdvisories

Vendor

Zscaler

53 known vulnerabilities.

Products

Client Connector 44 Zscaler Client Connector 2 ZIA Admin UI 2 Authentication Server 1 ZIA File Type Control 1 ZIA 1 ZIA Admin Portal 1 zscaler-mcp-server 1 Client Connector < 4.2.0.149 0 Client Connector < 1.10.1 0 Client Connector < 1.10.2 0 Client Connector < 1.4 0 Client Connector < 1.9.3 0 Client Connector < 3.7 0 Client Connector < 3.9 0 Client Connector < 3.4.0.124 0 Client Connector < 4.1 0 Client Connector < 3.6 0 Client Connector < 1.3.1.6 0 Client Connector < 1.4.0.105 0 Client Connector windows < 3.6 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-59568

    Remote Code Execution

    Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

    Zscaler Client Connector
  • Critical 9.1
    CVE-2026-59564

    Authentication bypass between ZCC and client connector portal

    An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.

    Zscaler Client Connector
  • Critical 9.6
    CVE-2025-54982

    SAML 2.0 Public Key Validation Issue

    An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse.

    Zscaler Authentication Server
  • Critical 9.6
    CVE-2023-28801

    Improper SAML signature verification

    An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r.

    Zscaler ZIA Admin Portal