# Zscaler in September 2026: incidents, uptime and changes

> Zscaler in September 2026: 0 incidents on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 5 CVEs. From Rewindex’s archive of Zscaler’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/zscaler/2026/09
Last updated: 2026-10-01T00:00:00Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): 100% free of major/critical incidents, 100% free of any incident; outage time 0 min, incident time 0 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 5
- Previous month: [August 2026](https://rewindex.com/company/zscaler/2026/08.md) · Next: [October 2026](https://rewindex.com/company/zscaler/2026/10.md) · [All months](https://rewindex.com/company/zscaler/reports.md) · [Zscaler](https://rewindex.com/company/zscaler.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2026-25687](https://rewindex.com/cve/CVE-2026-25687.md) ZCC race condition in ZPA tunnel handler (CVSS 8.1), published 2026-09-14
- [CVE-2026-59569](https://rewindex.com/cve/CVE-2026-59569.md) Android ZCC VPN API method privilege escalation (CVSS 8.1), published 2026-09-14
- [CVE-2026-59570](https://rewindex.com/cve/CVE-2026-59570.md) Android ZCC denial of service (CVSS 7.5), published 2026-09-14
- [CVE-2026-25684](https://rewindex.com/cve/CVE-2026-25684.md) File Type Control rule bypass (CVSS 4.4), published 2026-09-18
- [CVE-2026-59563](https://rewindex.com/cve/CVE-2026-59563.md) HMAC Confirmation Token Unbinding in zscaler-mcp-server (CVSS 4.6), published 2026-09-28

## Cite this

Zscaler posted 0 status incidents in September 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/zscaler/2026/09
- Citation: Zscaler, “Zscaler in September 2026” (2026-09-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/zscaler/2026/09 (CC BY 4.0).
- Markdown link: `[Zscaler: Zscaler in September 2026 (2026-09-01)](https://rewindex.com/company/zscaler/2026/09)`


---
Canonical: https://rewindex.com/company/zscaler/2026/09 · Markdown: https://rewindex.com/company/zscaler/2026/09.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:29:15.860Z