CVE-2026-22568

Published: Feb 23, 2026Modified: Jun 17, 2026

2.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.2 / Impact: 1.4

Source: NVD

Description

Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorized internal information in rare conditions.

Affected (1)

Products: Zscaler: Zscaler Internet Access Admin Portal

Zscaler

1 product

Zscaler Internet Access Admin Portal

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zscaler Zscaler Internet Access Admin Portal	Before 6.2r

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://help.zscaler.com/zia/release-upgrade-summary-2026?applicable_category=zscaler.net&deployment_date=2026-02-12&id=1538576

Source: cve@zscaler.com

Release NotesVendor Advisory

Timeline

No history available yet.