https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:40:39.868563+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-41973 CVE-2023-41973 — Lack of input santization on Zscaler Client Connector enables arbitrary code execution 2026-10-07T22:40:39.870345+00:00

Affected: Zscaler Client Connector, zscaler client_connector

ZSATray passes the previousInstallerName as a config parameter to TrayManager, and TrayManager constructs the path and appends previousInstallerName to get the full path of the exe. Fixed Version: Win ZApp 4.3.0.121 and later.