vulnerability

Zscaler Client Connector: CVE-2023-28793: Improper Control of Generation of Code

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:S/C:C/I:C/A:C)

Published

Oct 23, 2023

Added

Jun 5, 2025

Modified

Jun 17, 2026

Description

Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

Solution

zscaler-client-connector-update-latest

References

CVE-2023-28793
https://attackerkb.com/topics/CVE-2023-28793
CWE-94
CWE-787
EUVD-EUVD-2023-32428
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32428

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report