Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-59564 EUVD-2026-64860GHSA-r7wr-wrcm-fj8q

Authentication bypass between ZCC and client connector portal

Published Aug 24, 2026 · Updated Aug 25, 2026 · Assigned by Zscaler

Vendor: Zscaler Product: Client Connector

Description

An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.

Affected products

VendorProductAffectedFixed
Zscaler Client Connector < Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0.372, < MacOS: 4.5.2.312, 4.7.0.292, 4.8.0.191, < iOS: 4.5.1, < Android: 4.2, < ChromeOS: 4.2, < Linux: 3.7.2.64, 4.2.1.64 Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0.372

Advisories 1

References