CveMateVulnerability intelligence

Zscaler Mcp Server vulnerabilities

1 vulnerability

Known vulnerabilities in Zscaler Mcp Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2026-59563zscalerzscaler-mcp-server22d ago28-09-2026 12:54

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2.