Z
Zscaler
Security Risk Profile
55
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 59 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 16, 2021 to present
59
Total CVEs
43
Critical+High
0
Exploited
43
Unpatched
Threat Assessment
Avg CVSS
7.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
43
Critical/High
Risk Level
55/100
medium
📈 3 in Last 30 Days
Severity Distribution
Critical
9High
34Medium
12Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Input Validation
11
2
Buffer Overflow
3
3
Race Condition
2
4
OS Command Injection
2
5
Path Traversal
2
Most Affected Products
1. Zscaler Client Connector Windows26
2. Zscaler Client Connector Macos13
3. Zscaler Client Connector12
4. Zscaler Client Connector Linux10
5. Zscaler Zscaler Client Connector5
Recent Vulnerabilities
See more →CVE-2026-25684
CVSS 4.4medium
File Type Control rule bypass
Sep 18, 2026🔧 No Patch
CVE-2026-59569
CVSS 8.1high
Android ZCC VPN API method privilege escalation
Sep 14, 2026🔧 No Patch
CVE-2026-25687
CVSS 8.1high
ZCC race condition in ZPA tunnel handler
Sep 14, 2026🔧 No Patch
CVE-2026-59568
CVSS 9.1critical
Remote Code Execution
Aug 24, 2026🔧 No Patch
CVE-2026-59567
CVSS 8.8high
Local privilege escalation
Aug 24, 2026🔧 No Patch
CVE-2026-59566
CVSS 8.4high
Local denial-of-service
Aug 24, 2026🔧 No Patch
CVE-2026-40955
CVSS 2.1low
Integer underflow vulnerability in Secure Access clients
Jul 15, 2026🔧 No Patch
CVE-2026-22569
CVSS 5.4medium
Incorrect startup configuration in ZCC
Mar 31, 2026🔧 No Patch
CVE-2026-22567
CVSS 7.6high
ZIA Admin UI Input Validation Bug
Feb 23, 2026🔧 No Patch
CVE-2026-22568
CVSS 5.5medium
Unauthorized information retrieval in ZIA Admin UI
Feb 23, 2026🔧 No Patch
Monitor Zscaler in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.