CVE-2026-59564 describes an authentication bypass vulnerability in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal. The flaw could allow an attacker to bypass authentication mechanisms in the communication channel between these components. Zscaler Client Connector is a widely deployed enterprise security agent used for zero-trust network access. An authentication bypass in this component could have significant security implications for organizations relying on Zscaler for network security enforcement. The vulnerability is documented on the NVD and has an associated release summary from Zscaler detailing affected versions. The current criticality is rated High, suggesting meaningful risk to affected deployments. Users of affected versions should consult the Zscaler release summary to identify fixed versions and apply patches promptly.
