AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

ZscalerCVE-2026-59568

Zscaler Client Connector: remote code execution

Zscaler

CVE-2026-59568 · Published Aug 24, 2026 · updated Aug 28, 2026

Critical9.1
Fix: upgrade to Windows: 4.6.0.457 or later (9 fixed versions below)
Zscaler advisory

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

Affected versions

PackageAffectedFixed in
Client Connector
Product
< Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0.372Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0.372
< MacOS: 4.5.2.312, 4.7.0.292, 4.8.0.191MacOS: 4.5.2.312, 4.7.0.292, 4.8.0.191
< Linux: 3.7.2.64, 4.2.1.64Linux: 3.7.2.64, 4.2.1.64
< Android: 4.2Android: 4.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20

More Zscaler advisories

All Zscaler
High 7.5Sep 14Zscaler Client Connector: improper input validationCVE-2026-59570fixed in Android: 4.2.0.152 +1High 8.1Sep 14Zscaler Client Connector: race conditionCVE-2026-25687fixed in 4.6.0.486 +3High 8.8Aug 24Zscaler Client Connector: privilege escalationCVE-2026-59567fixed in Windows: 4.6.0.457 +8Critical 9.1Aug 24Zscaler Client Connector: authentication bypassCVE-2026-59564fixed in Windows: 4.6.0.457 +7High 8.8Aug 24Zscaler Client Connector: buffer overflowCVE-2026-59565fixed in Windows: 4.6.0.457 +3High 8.4Aug 24Zscaler Client Connector: buffer overflowCVE-2026-59566fixed in Android: 4.2 +1