Vulnerability · Published Feb 23, 2026 · Assigned by Zscaler
CVE-2026-22567ZIA Admin UI Input Validation Bug
High 7.6
In plain English
A high-severity improper input validation in ZIA Admin UI from Zscaler. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)7.6High
Exploit odds (30 days)0.2%top 87.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields in limited scenarios.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Zscaler | ZIA Admin UI | 6.2 – before 6.2r |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N