Zscaler Client Connector hard-coded proxy configuration domain
view advisory published 2026-04-02
Zscaler Client Connector 4.7 and 4.8 on Microsoft Windows misspell a domain that is added by default to an internal bypass list. This could lead to a limited amount of traffic from being inspected under specific circumstances.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-22569US | medium5.3 | — | ||
An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- FixedZscaler Client Connector
Fixed in 4.7.0.141.
https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2025
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan