CVE 9.9 CRITICAL

Zoom Node Deployments – Command Injection_CVE-2026-22844

9.9 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access.

AI Analysis

Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) allowing remote code execution

Basic Information

ID CVE-2026-22844
Source Zoom
Published Jan 20, 2026 at 13:57

Affected Product

Vendor Zoom Communications Inc.
Product Zoom Node
Affected Versions Zoom Communications Inc. Zoom Node 0

CWE Classification

AI Assessment

AI Score 9.9 / 10
AI Severity Critical
Vendor Zoom Communications Inc.
Product Zoom Node
Version before 5.2.1716.0

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.