PT-2026-40761 · Zoom Communications · Zoom Rooms

Published 2026-05-13 · Updated 2026-05-13 · CVE-2026-30906

NVD

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2026-30906

Affected Products

Zoom Rooms

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-30906 · Security Note
• https://zoom.com/en/trust/security-bulletin/zsb-26008 · Note