PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-59566 Zscaler CVE debrief

A locally exploitable buffer overflow bug in Zscaler Client Connector on Android and ChromeOS can cause a local denial-of-service attack. The CVE record was published on 2026-08-24T14:16:55.940Z and has not been modified since then. The NVD entry is currently Awaiting Analysis. Defenders should verify the affected versions of Zscaler Client Connector and assess exposure on Android and ChromeOS systems. This vulnerability has a CVSS score of 8.4 and is classified as HIGH severity. Additional details from the vendor or other sources are needed to fully understand the issue.

Vendor
Zscaler
Product
Client Connector
CVSS
HIGH 8.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-24
Original CVE updated
2026-10-12
Advisory published
2026-08-24
Advisory updated
2026-10-12

Who should care

Defenders responsible for Zscaler Client Connector systems on Android and ChromeOS should assess exposure and prioritize remediation. They should verify the affected versions of Zscaler Client Connector and assess exposure on Android and ChromeOS systems. Defenders should also monitor for local denial-of-service attacks on Zscaler Client Connector systems.

Why it matters

A locally exploitable buffer overflow bug in Zscaler Client Connector on Android and ChromeOS can cause a local denial-of-service attack, requiring defenders to verify affected versions, assess exposure, and prioritize remediation.

  • Verify affected versions of Zscaler Client Connector on Android and ChromeOS
  • Assess exposure and prioritize remediation on systems using Zscaler Client Connector
  • Monitor for local denial-of-service attacks on Zscaler Client Connector systems

Technical summary

A locally exploitable buffer overflow bug in Zscaler Client Connector on Android and ChromeOS can cause a local denial-of-service attack. The vulnerability has a CVSS score of 8.4 and is classified as HIGH severity. Defenders should prioritize verifying the affected versions of Zscaler Client Connector and assessing exposure on Android and ChromeOS systems. The CVE record and NVD entry provide limited information about the vulnerability.

Defensive priority

Defenders should prioritize verifying the affected versions of Zscaler Client Connector and assessing exposure on Android and ChromeOS systems.

Recommended defensive actions

  • Verify the affected versions of Zscaler Client Connector on Android and ChromeOS
  • Assess exposure and prioritize remediation on systems using Zscaler Client Connector
  • Monitor for local denial-of-service attacks on Zscaler Client Connector systems

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability, and additional details from the vendor or other sources are needed to fully understand the issue.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-59566 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-59566

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-59566 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-59566

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.