Skip to content
OpenAdvisories

Product · Zscaler

zscaler-mcp-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2026-59563

    HMAC Confirmation Token Unbinding in zscaler-mcp-server

    Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type.…

    Zscaler zscaler-mcp-server