CVE-2026-59568
CriticalCVSS 9.1Summary
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.
Risk Assessment
The risk includes takeover of the Zscaler client by an unauthorized attacker, potentially leading to endpoint compromise, data theft, or use of the client as an entry point into the corporate network.
Recommendation
It is recommended to immediately update Zscaler Client Connector to the latest available version that includes fixes for these vulnerabilities, and to monitor systems for unusual activity.
Original NVD description (English source)
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.