Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Client Connector Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Published	Severity

`CVE-2026-59570`Android ZCC denial of service	Exploitation statusNot known exploited	FixYes	Published09/14/2026	SeverityHigh
`CVE-2026-59569`Android ZCC VPN API method privilege escalation	Exploitation statusNot known exploited	FixYes	Published09/14/2026	SeverityHigh
`CVE-2026-25687`ZCC race condition in ZPA tunnel handler	Exploitation statusNot known exploited	FixYes	Published09/14/2026	SeverityHigh
`CVE-2026-59568`Remote Code Execution	Exploitation statusNot known exploited	FixYes	Published08/24/2026	SeverityCritical
`CVE-2026-59567`Local privilege escalation	Exploitation statusNot known exploited	FixYes	Published08/24/2026	SeverityHigh
`CVE-2026-59566`Local denial-of-service	Exploitation statusNot known exploited	FixYes	Published08/24/2026	SeverityHigh
`CVE-2026-59565`Local and kernel denial-of-service	Exploitation statusNot known exploited	FixYes	Published08/24/2026	SeverityHigh
`CVE-2026-59564`Authentication bypass between ZCC and client connector portal	Exploitation statusNot known exploited	FixYes	Published08/24/2026	SeverityCritical
`CVE-2024-31127`MacOS Zscaler Client Connector Local Privilege Escalation	Exploitation statusNot known exploited	FixYes	Published06/04/2025	SeverityHigh
`CVE-2023-28806`Signature validation error in DLL allows disabling anti-tampering protection	Exploitation statusNot known exploited	FixYes	Published08/06/2024	SeverityMedium
`CVE-2024-23483`Local Privilege Escalation via lack of input validation	Exploitation statusNot known exploited	FixYes	Published08/06/2024	SeverityHigh
`CVE-2024-23460`Incorrect signature validation of package	Exploitation statusNot known exploited	FixYes	Published08/06/2024	SeverityMedium
`CVE-2024-23464`Zscaler bypass with administrative privileges on Windows	Exploitation statusNot known exploited	FixYes	Published08/06/2024	SeverityHigh
`CVE-2024-23458`Local Privilege Escalation on Zscaler Client Connector on Windows	Exploitation statusNot known exploited	FixYes	Published08/06/2024	SeverityHigh
`CVE-2024-23456`Signature validation issue leads to Anti-Tampering bypass	Exploitation statusNot known exploited	FixYes	Published08/06/2024	SeverityHigh
`CVE-2024-23462`ZCC Mac validinstaller file integrity check missing	Exploitation statusNot known exploited	FixYes	Published05/02/2024	SeverityLow
`CVE-2024-23461`ZCC macOS Upgrade ZIP Bomb DoS	Exploitation statusNot known exploited	FixYes	Published05/02/2024	SeverityMedium
`CVE-2024-23459`Multiple Arbitrary Creates/Overwrites by link following	Exploitation statusNot known exploited	FixYes	Published05/02/2024	SeverityHigh
`CVE-2023-41971`Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control	Exploitation statusNot known exploited	FixYes	Published05/02/2024	SeverityMedium
`CVE-2023-41970`Repair App local code execution with arbitrary privileges	Exploitation statusNot known exploited	FixYes	Published05/02/2024	SeverityMedium
`CVE-2023-28798`Out-of-bounds write to heap in pacparser	Exploitation statusNot known exploited	FixYes	Published05/02/2024	SeverityMedium
`CVE-2024-23480`Insecure MacOS code sign check fallback	Exploitation statusNot known exploited	FixYes	Published05/01/2024	SeverityHigh
`CVE-2024-23457`Anti-tampering can be disabled with uninstall password enforced	Exploitation statusNot known exploited	FixYes	Published05/01/2024	SeverityHigh
`CVE-2024-23463`Anti-Tampering bypass via Repair App functionality	Exploitation statusNot known exploited	FixYes	Published04/30/2024	SeverityHigh
`CVE-2024-23482`ZScalerService Local Privilege Escalation	Exploitation statusNot known exploited	FixYes	Published03/26/2024	SeverityHigh
`CVE-2023-41973`Lack of input santization on Zscaler Client Connector enables arbitrary code execution	Exploitation statusNot known exploited	FixYes	Published03/26/2024	SeverityHigh
`CVE-2023-41972`Revert password check incorrect type validation	Exploitation statusNot known exploited	FixYes	Published03/26/2024	SeverityHigh
`CVE-2023-41969`ZSATrayManager Arbitrary File Deletion	Exploitation statusNot known exploited	FixYes	Published03/26/2024	SeverityHigh
`CVE-2023-28802`Disable Zscaler using machine tunnel restart	Exploitation statusNot known exploited	FixYes	Published11/21/2023	SeverityMedium
`CVE-2023-28794`PAC Files Exposed to Internet Websites	Exploitation statusNot known exploited	FixYes	Published11/06/2023	SeverityMedium
`CVE-2023-28805`ZCC on Linux privilege escalation	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityMedium
`CVE-2023-28804`Linux ZCC allows unsigned updates, allowing elevated Code Execution	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityHigh
`CVE-2023-28803`Traffic being bypassed by ZCC by configuring synthetic IP range as local network	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityMedium
`CVE-2023-28797`LPE using arbitrary file delete with Symlinks	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityMedium
`CVE-2023-28796`IPC Bypass Through PLT Section in ELF	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityHigh
`CVE-2023-28795`Client IPC validation bypass	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityHigh
`CVE-2023-28793`Heap Based Buffer Overflow in Library	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityHigh
`CVE-2021-26738`Privilege Escalation for ZCC macOS via PATH Variable	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityHigh
`CVE-2021-26737`Privilege Escalation Using PID Reuse in ZCC macOS	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityMedium
`CVE-2021-26736`ZApp Installer Privilege Escalation Vulnerabilities	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityMedium
`CVE-2021-26735`Untrusted Search Path While Executing REG DELETE by Uninstaller	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityMedium
`CVE-2021-26734`Junction Delete leading to elevation of privilege	Exploitation statusNot known exploited	FixYes	Published10/23/2023	SeverityMedium
`CVE-2023-28800`Output encoding missing in redrurl parameter	Exploitation statusNot known exploited	FixYes	Published06/22/2023	SeverityHigh
`CVE-2023-28799`	Exploitation statusNot known exploited	FixYes	Published06/22/2023	SeverityHigh

44 / 44 Results

All vulnerabilities loaded

Security vulnerabilities in Client Connector

Client Connector

How many security vulnerabilities does Client Connector currently have?

Does the latest version of Client Connector have any known vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management