Zscaler Client Connector EUVD-2026-17478

The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) indicates network-accessible attack surface with low complexity but requiring user interaction, limiting real-world exploitability. The low confidentiality and integrity impacts and absence of availability impact result in a moderate CVSS score of 5.4. The explicit statement that impact occurs only 'under rare circumstances' significantly reduces practical risk despite the low attack complexity. No KEV designation, active exploitation reports, or public proof-of-concept code have been identified, suggesting this is a theoretical vulnerability with limited real-world threat. Organizations relying on Zscaler Client Connector for comprehensive traffic inspection should prioritize remediation, but this is not a critical emergency requiring immediate patching.

An attacker crafts a network request that triggers the rare startup configuration condition in an affected Zscaler Client Connector instance. If a user initiates or restarts the client software at a moment when such a request is in flight, the misconfigured inspection parameters permit the traffic to bypass security controls, potentially allowing the attacker to exfiltrate sensitive data or inject malicious content. Success requires both knowledge of the specific startup timing window and user interaction with the client, making opportunistic exploitation unlikely.