Home

Description

Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorized internal information in rare conditions.

PUBLISHED Reserved 2026-01-07 | Published 2026-02-23 | Updated 2026-02-23 | Assigner Zscaler




MEDIUM: 5.5CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Problem types

CWE-20 Improper Input Validation

Product status

Default status
unaffected

6.2 (custom) before 6.2r
affected

Credits

Andrew Allen Hess on behalf of Cyber Defense Team (Deutsche Börse Group) finder

References

help.zscaler.com/...et&deployment_date=2026-02-12&id=1538576

cve.org (CVE-2026-22568)

nvd.nist.gov (CVE-2026-22568)

Download JSON