9.9
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access.
AI Analysis
Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) allowing remote code execution
Basic Information
ID
CVE-2026-22844
Source
Zoom
Published
Jan 20, 2026 at 13:57
Affected Product
Vendor
Zoom Communications Inc.
Product
Zoom Node
Affected Versions
Zoom Communications Inc. Zoom Node 0
CWE Classification
AI Assessment
AI Score
9.9 / 10
AI Severity
Critical
Vendor
Zoom Communications Inc.
Product
Zoom Node
Version
before 5.2.1716.0