Critical Zscaler Client Connector Vulnerability Allows Remote Code Execution Without Login

A critical remote code execution vulnerability (CVE-2026-59568, CVSS 9.1) affecting Zscaler Client Connector on managed Windows endpoints can be exploited remotely without authentication or user interaction. Zscaler's June 1, 2026 releases (including Windows version 4.8.0.232 and later builds listed) include fixes; administrators are advised to inventory endpoints, verify versions, and review endpoint telemetry for anomalous activity because successful exploitation could allow attackers to gain an initial foothold and compromise confidentiality and integrity.