PT-2026-24684 · Zoom Communications+1 · Zoom Rooms+1

Sim0Nsecurity · Publicado 2026-03-11 · Atualizado 2026-05-14 · CVE-2026-30901

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoom Rooms for Windows versions prior to 6.6.5

Description An improper input validation issue exists in Zoom Rooms for Windows in Kiosk Mode. A user with existing authentication can potentially escalate privileges through local access.

Recommendations Update Zoom Rooms for Windows to version 6.6.5 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2026-30901

Produtos afetados

Zoom Rooms

Rooms

Referências · 5

• https://twitter.com/CVEnew/status/2032998338178502895 · Publicação no Twitter
• https://t.me/cveNotify/163523 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-30901 · Nota de Segurança
• https://twitter.com/infoflowcloud/status/2032999405452701885 · Publicação no Twitter
• https://zoom.com/en/trust/security-bulletin/zsb-26003 · Aviso do Fabricante