File Type Control Policy Evaluation Issue in Zscaler Internet Access
CVE-2026-25684

4.4MEDIUM

Key Information:

Vendor

Zscaler

Status
Zia File Type Control
Vendor
CVE Published:
18 September 2026

What is CVE-2026-25684?

An identified issue in Zscaler Internet Access relates to file type attribution which may lead to improper evaluations of File Type Control policies under specific circumstances. This could potentially expose organizations to security risks if certain file types are misclassified, impacting the enforcement of secure file handling rules.

Affected Version(s)

ZIA File Type Control Cloud 0

References

https://help.zscaler.com/zia/release-upgrade-summary-2026

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nate Subra and Nathan Fowler
.