CVE-2026-22567

High · 7.6

CVSS

7.6

EPSS

0.2%

Published

Feb 23, 2026

CISA due date

—

The record

Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields in limited scenarios.

Affected packages

Ecosystem	Package	Introduced	Fixed