Z
Zscaler
Security Risk Profile
56
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 56 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 16, 2021 to present
56
Total CVEs
41
Critical+High
0
Exploited
41
Unpatched
Threat Assessment
Avg CVSS
7.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
41
Critical/High
Risk Level
56/100
medium
📈 3 in Last 30 Days
Severity Distribution
Critical
9High
32Medium
11Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Input Validation
9
2
Buffer Overflow
3
3
OS Command Injection
2
4
Path Traversal
2
5
Code Injection
2
Most Affected Products
1. Zscaler Client Connector Windows26
2. Zscaler Client Connector Macos13
3. Zscaler Client Connector12
4. Zscaler Client Connector Linux10
5. Zscaler Zscaler Client Connector4
Recent Vulnerabilities
See more →CVE-2026-59568
CVSS 9.1critical
Remote Code Execution
Aug 24, 2026🔧 No Patch
CVE-2026-59567
CVSS 8.8high
Local privilege escalation
Aug 24, 2026🔧 No Patch
CVE-2026-59566
CVSS 8.4high
Local denial-of-service
Aug 24, 2026🔧 No Patch
CVE-2026-40955
CVSS 2.1low
Integer underflow vulnerability in Secure Access clients
Jul 15, 2026🔧 No Patch
CVE-2026-22569
CVSS 5.4medium
Incorrect startup configuration in ZCC
Mar 31, 2026🔧 No Patch
CVE-2026-22567
CVSS 7.6high
ZIA Admin UI Input Validation Bug
Feb 23, 2026🔧 No Patch
CVE-2026-22568
CVSS 5.5medium
Unauthorized information retrieval in ZIA Admin UI
Feb 23, 2026🔧 No Patch
https://www.bleepingcomputer.com/news/security/danabot-malware-is-back-to-infecting-windows-after-6-month-break/
unknown
DanaBot malware is back to infecting Windows after 6-month break
Nov 12, 2025🔧 No Patch
CVE-2025-54983
CVSS 5.2medium
Health check port on ZCC allows tunnel bypass
Nov 12, 2025🔧 No Patch
https://www.theregister.com/2025/09/02/zscaler_customer_data_drift_compromise/
unknown
Zscaler latest victim of Salesloft Drift attacks, customer data exposed
Sep 2, 2025🔧 No Patch
Monitor Zscaler in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.