AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

ZscalerCVE-2026-59564

Zscaler Client Connector: authentication bypass

Zscaler

CVE-2026-59564 · Published Aug 24, 2026 · updated Aug 28, 2026

Critical9.1
Fix: upgrade to Windows: 4.6.0.457 or later (8 fixed versions below)
Zscaler advisory

An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.

Affected versions

PackageAffectedFixed in
Client Connector
Product
< Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0.372Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0.372
< MacOS: 4.5.2.312, 4.7.0.292, 4.8.0.191MacOS: 4.5.2.312, 4.7.0.292, 4.8.0.191
< iOS: 4.5.1iOS: 4.5.1
< Android: 4.2Android: 4.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-304

More Zscaler advisories

All Zscaler
High 7.5Sep 14Zscaler Client Connector: improper input validationCVE-2026-59570fixed in Android: 4.2.0.152 +1High 8.1Sep 14Zscaler Client Connector: race conditionCVE-2026-25687fixed in 4.6.0.486 +3High 8.8Aug 24Zscaler Client Connector: privilege escalationCVE-2026-59567fixed in Windows: 4.6.0.457 +8Critical 9.1Aug 24Zscaler Client Connector: remote code executionCVE-2026-59568fixed in Windows: 4.6.0.457 +8High 8.8Aug 24Zscaler Client Connector: buffer overflowCVE-2026-59565fixed in Windows: 4.6.0.457 +3High 8.4Aug 24Zscaler Client Connector: buffer overflowCVE-2026-59566fixed in Android: 4.2 +1