Vulnerability in Zscaler Client Connector Affecting User Session Management
CVE-2026-59570

7.5HIGH

Key Information:

Vendor

Zscaler

Status
Client Connector
Vendor
CVE Published:
14 September 2026

What is CVE-2026-59570?

The Zscaler Client Connector is impacted by a vulnerability that allows a pre-installed peer app to disrupt the Zscaler tunnel, resulting in forced user logout and the potential to alter packet capture settings. This flaw could compromise user sessions and data security, highlighting the need for immediate attention and remediation.

Affected Version(s)

Client Connector Android 0

Client Connector Android 0

References

https://help.zscaler.com/zscaler-client-connector/client-...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.