AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

ZscalerCVE-2026-25684

Zscaler: improper input validation

Zscaler

CVE-2026-25684 · Published Sep 18, 2026

Medium4.4
No fix yet
Zscaler advisory

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20

More Zscaler advisories

All Zscaler
Medium 4.6Sep 28Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC...CVE-2026-59563fixed in 0.7.2High 8.1Sep 14Zscaler Client Connector: improper input validationCVE-2026-59569fixed in Android: 4.2.0.152 +1High 7.5Sep 14Zscaler Client Connector: improper input validationCVE-2026-59570fixed in Android: 4.2.0.152 +1High 8.1Sep 14Zscaler Client Connector: race conditionCVE-2026-25687fixed in 4.6.0.486 +3High 8.8Aug 24Zscaler Client Connector: privilege escalationCVE-2026-59567fixed in Windows: 4.6.0.457 +8Critical 9.1Aug 24Zscaler Client Connector: remote code executionCVE-2026-59568fixed in Windows: 4.6.0.457 +8