Improper Authorization Vulnerability in Zoom Workplace for Android
CVE-2026-53418

8.1HIGH

Key Information:

Vendor: Zoom Communications
Status: Zoom Workplace
Vendor: CVE Published:; 13 October 2026

🔔 Create Zoom Communications Vulnerability Alert

What is CVE-2026-53418?

A vulnerability exists in Zoom Workplace for Android where improper authorization in the handler for custom URL schemes allows unauthorized users to escalate privileges. This flaw may enable attackers to access sensitive features without authentication, emphasizing the need for users to update to the latest version to ensure their security.

Affected Version(s)

Zoom Workplace Android 0 < 7.2.1

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26019

CVSS V3.1

Score:

8.1

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Jun 9, 2026

CVE-2026-53418 Data

JSON