CVE-2021-26738

—

CVSS 3.1

7.8 high

EPSS

<1%p14

Published

Oct 23, 2023 (Oct 23, 2023)

Modified

Jun 17, 2026

Description

Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges.

Vendors: zscaler
Products: client connector
Weakness: CWE-426
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.