Z
Vendor security profile
zscaler
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical2
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.5
12-month vulnerability rate
0
0
0
0
1
0
0
0
0
5
5
0
CVE KEV
CVE severity distribution
11toplam CVE
Critical2 (18%)
High6 (55%)
Medium3 (27%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
4.6
CVE-2026-59563
HMAC Confirmation Token Unbinding in zscaler-mcp-server
Z
Patch status unknownEPSS %0
4.4
CVE-2026-25684
File Type Control rule bypass
Z
Patch status unknownEPSS %0
7.5
CVE-2026-59570
Android ZCC denial of service
Z
Patch status unknownEPSS %0
8.1
CVE-2026-59569
Android ZCC VPN API method privilege escalation
Z
Patch status unknownEPSS %0
8.1
CVE-2026-25687
ZCC race condition in ZPA tunnel handler
Z
Patch status unknownEPSS %0
9.1
CVE-2026-59568
Remote Code Execution
Z
Patch status unknownEPSS %1
8.8
CVE-2026-59567
Local privilege escalation
Z
Patch status unknownEPSS %0
8.4
CVE-2026-59566
Local denial-of-service
Z
Patch status unknownEPSS %0
8.8
CVE-2026-59565
Local and kernel denial-of-service
Z
Patch status unknownEPSS %0
9.1
CVE-2026-59564
Authentication bypass between ZCC and client connector portal
Z
Patch status unknownEPSS %1