Privilege Escalation Vulnerability in Zoom Contact Center for Windows
CVE-2026-53406

7.8HIGH

Key Information:

Vendor

Zoom Communications

Status
Remote Control For Zoom Contact Center
Vendor
CVE Published:
12 June 2026

What is CVE-2026-53406?

An insufficient verification of data authenticity vulnerability exists in the Zoom Contact Center for Windows, potentially allowing an authenticated user to escalate privileges through local access. This flaw underscores the importance of robust authentication methodologies to ensure user actions are securely verified.

Affected Version(s)

Remote Control for Zoom Contact Center Windows 0 < 7.0.0

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26009

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.