Quick answers
- Is CVE-2026-25684 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-25684 being exploited in the wild.
- How severe is CVE-2026-25684?
- Medium severity, with a CVSS score of 4.4, published 18 September 2026.
- Which products and versions are affected?
- Zscaler Internet Access <UNKNOWN>.
- Is there a fix for CVE-2026-25684?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-25684 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-25684?
- Check whether you run Zscaler Internet Access at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A file type attribution issue exists in Zscaler Internet Access File Type Control evaluation rules that may allow improper evaluation of File Type Control policies. The vulnerability results from incorrect file type classification in the policy evaluation engine, which could permit restricted file types to bypass controls under specific circumstances. The issue is described as occurring in rare circumstances and affects the enforcement of File Type Control policies. A patch or update is available to remediate this issue.
Affected products
- Zscaler Internet Access <UNKNOWN>
Timeline
- 2026-09-18: disclosed