Traffic Inspection Vulnerability in Zscaler Client Connector for Windows
CVE-2026-22569

5.4MEDIUM

Key Information:

Vendor

Zscaler

Status
Zscaler Client Connector
Vendor
CVE Published:
31 March 2026

What is CVE-2026-22569?

A misconfigured startup setup for Zscaler Client Connector on Windows can potentially lead to certain traffic not being inspected during specific, rare circumstances. This issue may jeopardize network security by permitting unmonitored traffic flow, highlighting the importance of proper configuration to ensure all data is adequately protected and inspected.

Affected Version(s)

Zscaler Client Connector Windows 4.7 < 4.7.0.141

Zscaler Client Connector Windows 4.8 < 4.8.0.63

References

https://help.zscaler.com/zscaler-client-connector/client-...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jordan Eberst, CISA
.