Summary
| Parameter | Value |
|---|---|
| CVE ID | CVE-2026-108186 |
| Alert Source | GitHub Advisory - Critical Vulnerability |
| CVE Publication Year | 2026 |
| Date Published | 2026-11-10 |
| Vendor | Zoom |
| Product | Zoom Workplace for Windows |
| Vulnerability Type | improper input validation, privilege escalation (CWE-20) |
| CVSS Score | 9.6 (critical) |
| EPSS Score | No data |
| CISA KEV | No |
| Ransomware | Not confirmed |
Vulnerability Description
Improper input validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
According to the vendor’s CVSS vector, the attack requires user interaction and its impact extends beyond the application itself (changed scope, high impact on confidentiality, integrity and availability).
Required Actions
- Update Zoom Workplace for Windows to the version listed in bulletin ZSB-26023 — ideally centrally (Intune, SCCM, MSI with auto-update).
- Check endpoints for leftover per-user Zoom client installations, which bypass central deployments.
- Consider enabling automatic Zoom client updates in your corporate configuration.
Who Is Affected?
The vulnerability affects the Zoom Workplace for Windows application (formerly Zoom Desktop Client). Zoom is often installed by users themselves, which makes version inventory harder.
Sources
Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.
Frequently asked questions
What is the CVE-2026-108186 vulnerability?
CVE-2026-108186 is an improper input validation flaw (CWE-20) in Zoom Workplace for Windows leading to privilege escalation. CVSS score: 9.6.
Does exploiting CVE-2026-108186 require authentication?
No. The attacker does not need to be authenticated, but according to the CVSS vector user interaction is required.
How to protect against CVE-2026-108186?
Update Zoom Workplace for Windows to the version listed in bulletin ZSB-26023.
Who is affected by CVE-2026-108186?
Organizations and users running Zoom Workplace on Windows computers.
