Improper Input Validation Vulnerability in Zoom Workplace for Windows
CVE-2026-108186

9.6CRITICAL

Key Information:

Vendor: Zoom Communications
Status: Zoom Workplace
Vendor: CVE Published:; 10 November 2026

🔔 Create Zoom Communications Vulnerability Alert

What is CVE-2026-108186?

A security vulnerability in Zoom Workplace for Windows arises from improper input validation, potentially enabling an unauthenticated user to escalate privileges through network access. This flaw highlights the importance of input validation in preventing unauthorized access and ensuring system integrity, making it crucial for users and administrators to patch this vulnerability promptly to safeguard their environments.

Affected Version(s)

Zoom Workplace Windows 7.1 < 7.1.8

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26023

CVSS V3.1

Score:

9.6

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Oct 9, 2026

CVE-2026-108186 Data

JSON