Description
On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture.
Published: 2026-09-14
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch Upgrade
AI Analysis

Impact

A flaw in Zscaler Client Connector on Android devices allows a pre‑installed peer application to terminate the Zscaler tunnel, force the user to log out, and toggle packet capture, resulting in an abrupt interruption of network connectivity classic improper input validation flaw, classified as CWE‑20.

Affected Systems

The vulnerability affects the Zscaler Client Connector application on Android. All installed instances of the client that include the pre‑installed peer app are impacted; specific version details were not disclosed.

Risk and Exploitability

The CVSS base score of 7.5 indicates a high severity. The EPSS score of 0.00094, a very low exploitation probability, indicates that the likelihood of exploitation is minimal, but not zero, and the lack of KEV listing suggests no documented active exploitation yet. The attack vector is presumed to be local or through installation of the peer app, as no network‑based vectors are described.

Generated by OpenCVE AI on September 21, 2026 at 00:37 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update Zscaler Client Connector to the latest release, as documented in the vendor release summary
  • Remove or disable the pre‑installed peer application that can terminate the tunnel if it is not required for the device’s operation
  • Configure local firewall or device policies to block unauthorized packet capture commands from the peer app

Generated by OpenCVE AI on September 21, 2026 at 00:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 15 Sep 2026 06:15:00 +0000

Type Values Removed Values Added
First Time appeared Zscaler
Zscaler client Connector
Vendors & Products Zscaler
Zscaler client Connector

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture.
Title Android ZCC denial of service
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Zscaler Client Connector
cve-icon MITRE

Status: PUBLISHED

Assigner: Zscaler

Published:

Updated: 2026-09-14T15:32:24.258Z

Reserved: 2026-07-06T06:18:59.633Z

Link: CVE-2026-59570

cve-icon Vulnrichment

Updated: 2026-09-14T15:32:21.025Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-14T15:17:06.720

Modified: 2026-09-18T19:08:02.707

Link: CVE-2026-59570

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-21T00:45:08Z

Weaknesses
  • CWE-20

    Improper Input Validation