CVE-2026-22844

{"id": "CVE-2026-22844", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@zoom.us", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}]}, "published": "2026-01-20T14:16:21.980", "references": [{"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26001", "source": "security@zoom.us"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@zoom.us", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n de comandos en los Routers Multimedia (MMR) de Zoom Node anteriores a la versi\u00f3n 5.2.1716.0 podr\u00eda permitir a un participante de la reuni\u00f3n realizar la ejecuci\u00f3n remota de c\u00f3digo del MMR a trav\u00e9s del acceso a la red."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "security@zoom.us"}