Client Connector
- Software type
- Endpoint security
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/12/2026, Client Connector recorded 8 security vulnerabilities in the last 90 days, of which 8 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Client Connector and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-59570Android ZCC denial of serviceCVE-2026-59569Android ZCC VPN API method privilege escalationCVE-2026-25687ZCC race condition in ZPA tunnel handlerCVE-2026-59568Remote Code ExecutionCVE-2026-59567Local privilege escalation| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-59570Android ZCC denial of service | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-59569Android ZCC VPN API method privilege escalation | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityHigh |
|---|
CVE-2026-25687ZCC race condition in ZPA tunnel handler | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityHigh |
|---|
CVE-2026-59568Remote Code Execution | Exploitation statusNot exploited | FixYes | Published08/24/2026 | SeverityCritical |
|---|
CVE-2026-59567Local privilege escalation | Exploitation statusNot exploited | FixYes | Published08/24/2026 | SeverityHigh |
|---|
CVE-2026-59566Local denial-of-service | Exploitation statusNot exploited | FixYes | Published08/24/2026 | SeverityHigh |
|---|
CVE-2026-59565Local and kernel denial-of-service | Exploitation statusNot exploited | FixYes | Published08/24/2026 | SeverityHigh |
|---|
CVE-2026-59564Authentication bypass between ZCC and client connector portal | Exploitation statusNot exploited | FixYes | Published08/24/2026 | SeverityCritical |
|---|
CVE-2024-31127MacOS Zscaler Client Connector Local Privilege Escalation | Exploitation statusNot exploited | FixYes | Published06/04/2025 | SeverityHigh |
|---|
CVE-2023-28806Signature validation error in DLL allows disabling anti-tampering protection | Exploitation statusNot exploited | FixYes | Published08/06/2024 | SeverityMedium |
|---|
44 Results | Page 1 of 5