Threadlinqs IntelligenceStart free

Vendor1 product tracked

Zscaler vulnerabilities & exploitation

As of 2026-10-27, Threadlinqs tracks 6 Zscaler CVEs, 0 in the CISA Known Exploited Vulnerabilities catalog, linked to 1 tracked threat campaign.

CVEs
6Since 2026
CISA KEV
00% of CVEs
Critical
2CVSS v3 9.0+
Avg CVSS
8.3/10Max 9.1
Threats
1Linked campaigns
Actors
0None attributed

Data as of:

Exploitation timeline

Threadlinqs has recorded 6 Zscaler CVEs published between and . The busiest month was 2026-08 (5 new CVEs). None of them is listed in CISA KEV yet.

Most exploited vulnerabilities

Ranked with CISA KEV listings first, then EPSS exploit probability, then CVSS score. Showing 6 of 6 tracked Zscaler CVEs.

Products affected

Threadlinqs normalises CPE and CNA product records across all 6 CVEs; 1 distinct Zscaler product is affected. The most frequently affected:

  • Client Connector 6 CVEs

Threat activity

1 tracked threat campaign reference Zscaler products or exploit Zscaler CVEs:

How to prioritise Zscaler patching

This order follows the data Threadlinqs holds for Zscaler, not a generic severity checklist:

  • No Zscaler CVE is in CISA KEV yet, so rank by exploit probability instead.
  • Outside KEV, the highest EPSS scores are CVE-2026-59564 (0.5%), CVE-2026-59565 (0.5%), CVE-2026-22569 (0.2%).
  • 2 CVEs score Critical and 3 High on CVSS v3 (maximum 9.1, average 8.3); sequence these after KEV and high-EPSS items.

About this data

Vendor attribution comes from the CNA and CPE product records of each CVE, folded to one vendor name; CVSS, EPSS and KEV status are read from the Threadlinqs CVE catalog; campaign and actor links come from tracked threat records. Counts reflect the data as of 2026-10-27 and refresh daily.