Zscaler Vulnerabilities

Comprehensive security vulnerability database for Zscaler products

Last updated: Feb 23, 2026
Total CVEs

2

Critical

0

With Exploits

3

Last 30 Days

0

Severity Distribution

Critical0
0%
High3
150%
Medium0
0%
Low2
100%
DescriptionVendor / ProductExploit Status
CVE-2026-225682.7

This vulnerability allows an authenticated administrator to potentially access unauthorized internal information through the Zscaler Internet Access Admin portal. However, this can only happen under rare conditions where the input provided by the user is not properly handled.

zscalerzscaler internet access admin portal
Exploit Available
about 1 month agoFeb 23, 2026
CVE-2026-225672.7

This vulnerability allows an authenticated administrator to potentially execute backend functions by entering specific inputs in the Zscaler Internet Access Admin Portal. However, it only occurs under limited scenarios where the input validation is not properly enforced.

zscalerzscaler internet access admin portal
Exploit Available
about 1 month agoFeb 23, 2026

About Zscaler Security

This page tracks all publicly disclosed security vulnerabilities (CVEs) affecting Zscaler products. Our database is updated in real-time from the National Vulnerability Database (NVD) and enriched with exploit information from GitHub and other security research sources.

Each CVE listing includes CVSS severity scores, exploit availability status, AI-powered vulnerability summaries, and links to official patches and security advisories.