CVE-2026-22568

Medium · 5.5

CVSS

5.5

EPSS

0.2%

Published

Feb 23, 2026

CISA due date

—

The record

Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorized internal information in rare conditions.

Affected packages

Ecosystem	Package	Introduced	Fixed