PT-2026-24684 · Zoom Communications+1 · Zoom Rooms+1

Sim0Nsecurity · Published 2026-03-11 · Updated 2026-05-14 · CVE-2026-30901

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoom Rooms for Windows versions prior to 6.6.5

Description An improper input validation issue exists in Zoom Rooms for Windows in Kiosk Mode. A user with existing authentication can potentially escalate privileges through local access.

Recommendations Update Zoom Rooms for Windows to version 6.6.5 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-30901

Affected Products

Zoom Rooms

Rooms

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-30901 · Security Note
• https://zoom.com/en/trust/security-bulletin/zsb-26003 · Vendor Advisory
• https://twitter.com/CVEnew/status/2032998338178502895 · Twitter Post
• https://t.me/cveNotify/163523 · Telegram Post
• https://twitter.com/infoflowcloud/status/2032999405452701885 · Twitter Post