PT-2026-40761 · Zoom · Zoom Rooms

Sim0Nsecurity · Published 2026-05-13 · Updated 2026-06-03 · CVE-2026-30906

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoom Rooms for Windows versions prior to 7.0.0

Description An untrusted search path in the installer allows an authenticated user with local access to achieve escalation of privilege.

Recommendations Update to version 7.0.0 or later.

Fix

LPE

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2026-30906

Affected Products

Zoom Rooms

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-30906 · Security Note
• https://zoom.com/en/trust/security-bulletin/zsb-26008 · Vendor Advisory
• https://twitter.com/KaitanSecurity/status/2054645372199334177 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2054716959141376211 · Twitter Post
• https://t.me/cveNotify/165755 · Telegram Post