Beveiligingsadvies

CVE-2026-25687

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-14 14:37:04
Laatst bijgewerkt 2026-09-15 03:56:03
Toegewezen door Zscaler
CVSS-score 8.1
Status PUBLISHED

Beschrijving

A race condition in the ZPA tunnel handler of affected versions of Zscaler Client Connector (ZCC) allows a heap corruption, resulting in a denial of service (client crash) and potentially arbitrary code execution in the context of the ZCC process.