CVE-2026-59569

The verdict

A validation bug in Zscaler Client Connector on Android and ChromeOS lets an attacker bypass Zscaler security controls. That means traffic that should be inspected or blocked can slip through unfiltered. CVSS 8.1, so the potential impact is significant for any environment relying on Zscaler for endpoint enforcement on mobile or ChromeOS devices.

Patch urgency · Patch within 24 hours