Zscaler Authentication Server vulnerabilities

Latest Zscaler Authentication Server CVEs

Newest publication first

1. CVE-2025-54982 SAML 2.0 Public Key Validation Issue

   Published 2025-08-05

   Critical·CVSS 9.6 EPSS 0.41%

   An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.