Vulnerability details
CVE-2026-108186
Zoom Communications Zoom Workplace
CVSS 3.1
9.6Critical
Official description
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.6Critical | 3.1 | CVEProject cvelistV5 (CNA) (Zoom) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Zoom Communications | Zoom Workplace | 7.1 ≤ v < 7.1.8 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-11-10
- Last updated
- 2026-11-10
- State
- Published
- Assigner (CNA)
- Zoom
- Kolun priority
- 14 · Low
Exploit prediction (EPSS)
No EPSS score has been published for this CVE yet.
Weaknesses (CWE)
- CWE-20Improper input validation