CVE-2026-59568CWE-20

CVE-2026-59568

Critical · published August 24, 2026

CVSS v3.1
9.1
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00664 · 51.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-08-24T18:16Z
References (1)
https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026 · [email protected]
EPSS history
Timeline
  • 26 AUG 08:17Z
    EPSS moved — → 0%
    epss
  • 24 AUG 13:44Z
    Remote Code Execution
    cvelistv5