Zscaler Internet Access
Moderate fix1 remedy
cpe:2.3:a:zscaler:zscaler_internet_access_admin_portal:*:*:*:*:*:*:*
Moderate fix1 remedy
Zscaler Internet Access Improper Input Neutralization Vulnerability Allowing Unauthorized Information Access
Vulnerability
Patched
A vulnerability exists in the Zscaler Internet Access (ZIA) Admin UI due to improper neutralization of special elements in user-supplied input. This issue could allow an authenticated administrator to access or retrieve unauthorized internal information under rare conditions.
Impact
Exploitation of this vulnerability could lead to unauthorized access to internal information.
Remediation
Zscaler has addressed this vulnerability in the February 12, 2026, service update. No additional user action is required.
Added: Feb 23, 2026, 5:32 PM
Updated: Feb 23, 2026, 6:19 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
2.4remediation
7.7relevance
3.1threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.