Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.6

Zoom Workplace for Windows can let attackers gain admin rights

CVE-2026-108186 · published 1 day ago
Summary

Zoom Workplace for Windows does not properly check incoming data, which could let an outsider connect over the network and raise their access level. This could allow them to perform actions reserved for administrators. Apply the latest Zoom update or security patch to close the gap.

What to do
  • Update zoom communications zoom workplace to version 7.1.8 or later.
Affected software
VendorProductAffected versions
zoom communications zoom workplace < 7.1.8
Original advisory text
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.6 Critical
Type
CWE-20Improper Input Validation
Timeline
Published10 Nov 2026
Updated11 Nov 2026
First seen10 Nov 2026
Sources
CVE-2026-108186 · NVD
CVE-2026-108186 · MITRE
Track software like this
Free during beta