PT-2025-31904 · Zscaler · Zscaler

Published 2025-08-05 · Updated 2025-08-14 · CVE-2025-54982

Positive Technologies · (AI Summary)

CVSS v3.1

9.6

Critical

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zscaler (affected versions not specified)

Description An improper verification of a cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed for authentication abuse.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2025-54982

Affected Products

Zscaler

References · 19

• https://nvd.nist.gov/vuln/detail/CVE-2025-54982 · Security Note
• https://twitter.com/TweetThreatNews/status/1956111800715354531 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1mn8xnr/top_10_trending_cves_11082025 · Reddit Post
• https://twitter.com/fofabot/status/1952630328872571107 · Twitter Post
• https://reddit.com/r/Zscaler/comments/1mj75iv/recent_cve · Reddit Post
• https://twitter.com/UjlakiMarci/status/1952629191872040962 · Twitter Post
• https://t.me/cveNotify/130874 · Telegram Post
• https://twitter.com/offseq/status/1952610636044583112 · Twitter Post
• https://twitter.com/AmberWolfSec/status/1954338453879140801 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1mjw1lc/top_10_trending_cves_07082025 · Reddit Post
• https://twitter.com/CVEnew/status/1952617293285929224 · Twitter Post
• https://t.me/CVEtracker/29180 · Telegram Post
• https://twitter.com/AmberWolfSec/status/1954338446366953752 · Twitter Post
• https://twitter.com/cracbot/status/1954498010441801886 · Twitter Post
• https://help.zscaler.com/zia/about-identity-providers · Note