CVE-2026-25684: Zscaler Zia File Type Control

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances.

Affected products

• Zscaler Zia File Type Control

Published 2026-09-18. Last modified 2026-09-18.