Vendor

    Zscaler

    58 known vulnerabilities in products by Zscaler, 0 of them actively exploited (CISA KEV).

    Key figures

    58

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    10

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Zscaler
    HighCVE-2024-3661

    DHCP routing options can manipulate interface-based VPN traffic

    also in 7 other products

    		7.6
    CriticalCVE-2020-11633

    Zscaler Client Connector: Stack-Based Buffer Overflow

    		9.8
    CriticalCVE-2026-59568

    Remote Code Execution

    		9.1
    CriticalCVE-2026-59564

    Authentication bypass between ZCC and client connector portal

    		9.1
    HighCVE-2026-59565

    Local and kernel denial-of-service

    		8.8
    HighCVE-2026-25687

    ZCC race condition in ZPA tunnel handler

    		8.1
    CriticalCVE-2025-54982

    SAML 2.0 Public Key Validation Issue

    		9.6
    HighCVE-2026-59567

    Local privilege escalation

    		8.8
    HighCVE-2026-59569

    Android ZCC VPN API method privilege escalation

    		8.1
    HighCVE-2026-59566

    Local denial-of-service

    		8.4
    CriticalCVE-2024-23483

    Local Privilege Escalation via lack of input validation

    		7.0
    HighCVE-2026-59570

    Android ZCC denial of service

    		7.5
    HighCVE-2023-28800

    Output encoding missing in redrurl parameter

    		8.1
    CriticalCVE-2023-28801

    Improper SAML signature verification

    		9.6
    HighCVE-2024-23463

    Anti-Tampering bypass via Repair App functionality

    		8.8
    HighCVE-2023-28799

    Zscaler Client Connector: Improper Validation of Specified Type of Input

    		8.2
    CriticalCVE-2024-23459

    Multiple Arbitrary Creates/Overwrites by link following

    		7.1
    HighCVE-2026-22567

    ZIA Admin UI Input Validation Bug

    		7.6
    HighCVE-2024-23464

    Zscaler bypass with administrative privileges on Windows

    		7.2
    MediumCVE-2026-59563

    HMAC Confirmation Token Unbinding in zscaler-mcp-server

    		4.6
    HighCVE-2020-11634

    Zscaler Client Connector: Code Execution

    		7.8
    HighCVE-2020-11635

    Zscaler Client Connector for Windows: security vulnerability

    		7.8
    CriticalCVE-2023-28798

    Out-of-bounds write to heap in pacparser

    		6.5
    HighCVE-2023-28804

    Linux ZCC allows unsigned updates, allowing elevated Code Execution

    		8.2
    HighCVE-2023-28793

    Heap Based Buffer Overflow in Library

    		7.8

    All vulnerabilities in search

    Products

    Products by Zscaler
    Client Connector850
    Zscaler ZIA Admin UI30