What is CVE-2026-59568?

CVE-2026-59568 is a critical-severity vulnerability in Zscaler Client Connector, classified under Improper Input Validation. CVSS score: 9.1/10. Published 2026-08-24.

How severe is CVE-2026-59568?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Improper input validation in Zscaler Client Connector

CVE-2026-59568

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Zscaler Client Connector

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@zscaler.com

Frequently asked questions

What is CVE-2026-59568?: CVE-2026-59568 is a critical-severity vulnerability in Zscaler Client Connector, classified under Improper Input Validation. CVSS score: 9.1/10. Published 2026-08-24.
How severe is CVE-2026-59568?: Critical severity. CVSS v3 base score is 9.1 out of 10.