CVE-2023-28801: Zscaler Internet Access Admin Portal

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r.

Affected products

• Zscaler Zscaler Internet Access Admin Portal: from 6.2, before 6.2r (fixed in 6.2r)

Published 2023-08-31. Last modified 2026-06-17.