Skip to content
OpenAdvisories
High · 8.1 CVE-2026-59569 EUVD-2026-77537GHSA-4vcv-p436-xxwh

Android ZCC VPN API method privilege escalation

Published Sep 14, 2026 · Updated Sep 15, 2026 · Assigned by Zscaler

Description

An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls.

Affected products

VendorProductAffectedFixed
Zscaler Client Connector < Android: 4.2.0.152, < ChromeOS: 4.2.0.152 Android: 4.2.0.152

Advisories 1

References