What is the CVSS score of CVE-2026-59567?

CVE-2026-59567 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Zscaler Client Connector are affected by CVE-2026-59567?

Zscaler Client Connector contains a privilege escalation flaw that converts any employee endpoint user into a system administrator with arbitrary code execution capability, creating direct risk to…

How to fix or mitigate CVE-2026-59567?

Within 24 hours: Identify all endpoints running Zscaler Client Connector and document current versions across your environment. Within 7 days: Deploy compensating controls including enhanced monitoring of privileged Client Connector process execution, restrict local administrator rights where feasible, implement endpoint detection and response (EDR) tuning for privilege escalation patterns, and review recent system logs for exploitation indicators. Within 30 days: Monitor Zscaler security advisories for patch release and establish pre-approved emergency change control procedures to deploy the fix within 48 hours of availability.

Zscaler Client Connector CVE-2026-59567

EUVD-2026-64883 HIGH

Improper Handling of Insufficient Permissions or Privileges (CWE-280)

2026-08-24 Zscaler

GHSA-56q3-pp8q-5vwr

Privilege Escalation RCE Client Connector Zscaler

8.8

CVSS 3.1 · Vendor: Zscaler

Severity by source

Vendor (Zscaler) PRIMARY

8.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Local attack requiring a standard user session (PR:L, AV:L); scope change reflects full compromise of the privileged Zscaler agent process boundary.

3.1 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (Zscaler).

CVSS VectorVendor: Zscaler

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 24, 2026 - 14:40 vuln.today

CVE Published

Aug 24, 2026 - 13:41 cve.org

HIGH 8.8

DescriptionCVE.org

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context.

AnalysisAI

Local privilege escalation in Zscaler Client Connector enables a standard (non-administrative) local user to execute arbitrary code in a privileged context via multiple improper privilege handling flaws (CWE-280). The scope change captured in the CVSS vector (S:C) reflects that exploitation breaks the security boundary of the Client Connector's privileged agent process, extending impact beyond the attacker's initial user context to full High-rated confidentiality, integrity, and availability impact. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated local user session on the target endpoint - specifically a non-administrative OS account, consistent with CVSS PR:L. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 base score of 8.8 is driven primarily by the scope change (S:C) and the full confidentiality, integrity, and availability impact triad at High, meaning successful exploitation fully compromises the privileged Zscaler agent component. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	The primary remediation is to update Zscaler Client Connector to the patched version documented in the vendor's 2026 release summary at https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026. … Detailed patch versions, workarounds, and compensating controls in full report.