by Kastro
Paper/Archive/CVE-2026-108186

CVE-2026-108186

Zoom Communications Zoom Workplace — Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via netwo…

CVSS 9.6
critical.is priorityof 100
29
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.

Affected

ProductAffectedFixed inSource
Zoom Workplace7.1 – < 7.1.87.1.8CNA

Scores by source

Zoom (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

refzoom.com/en/trust/security-bulletin/zsb-26023