CVE-2026-22567

Published: Feb 23, 2026Modified: Jun 17, 2026

2.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Exploitability: 1.2 / Impact: 1.4

Source: NVD

Description

Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields in limited scenarios.

Affected (1)

Products: Zscaler: Zscaler Internet Access Admin Portal

Zscaler

1 product

Zscaler Internet Access Admin Portal

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zscaler Zscaler Internet Access Admin Portal	Before 6.2r

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://help.zscaler.com/zia/release-upgrade-summary-2025?applicable_category=zscalertwo.net&deployment_date=2025-12-17&id=1538575

Source: cve@zscaler.com

Release NotesVendor Advisory

Timeline

No history available yet.