CVE-2026-59567 – Client Connector
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“These flaws can turn an exposed endpoint into a path for code execution or elevated control.”
Zscaler Client Connector contains two serious vulnerabilities. CVE-2026-59568 allows an unauthenticated, unprivileged user to execute arbitrary code in the Client Connector context. CVE-2026-59568 has a CVSS score of 9.1, Critical severity. CVE-2026-59567 allows a local unprivileged user to execute arbitrary code in a privileged context. CVE-2026-59567 has a CVSS score of 8.8, High severity.
The update addresses both remote code execution and local privilege-escalation risk across affected Client Connector versions.
Key Details
- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-280
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.