CVE-2026-59569CWE-20

CVE-2026-59569

High · published September 14, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-09-14T19:17Z
References (1)
https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026 · [email protected]
EPSS history
Timeline
  • 16 SEP 04:29Z
    EPSS moved — → 0%
    epss
  • 14 SEP 14:42Z
    Android ZCC VPN API method privilege escalation
    cvelistv5