CVE-2026-59568

CVSS 9.1 (critical) · published 2026-08-24

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

Weakness: CWE-20

Source: NVD CVE-2026-59568

References

• https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.