CVE-2026-108186
Critical CVSS 9.6Published 2026-11-10 ยท last changed 2026-11-11
From our blog
The fix
These are the fixed versions from our post on CVE-2026-108186. The vendor's advisory has anything released since.
| Product | Affected | Fixed in |
|---|---|---|
| Zoom Workplace for Windows | 7.1.0 to before 7.1.8 | 7.1.8 |
The post also shows how to check each machine and what to do about it.
What it is
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
Affected software
- zoom workplace (from 7.1, before 7.1.8)
From the vendor's own CVE record. NVD hasn't analyzed this CVE yet, so RFF matches on these versions until it does, and switches to NVD's list once it's published.
Sources
- NVD record for CVE-2026-108186
- The vendor's CVE record (cve.org), NVD hasn't analyzed it yet (RFF fetched it 2026-11-15)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H