InfoSecBulletin Cybersecurity for mankind
A critical command injection flaw in Node Multimedia Routers (MMRs) may let meeting participants run arbitrary code on vulnerable systems. CVE-2026-22844 is a highly critical vulnerability with a CVSS score of 9.9, indicating an urgent need for immediate action.
Zoom Command Injection Vulnerability:
Meta’s louisiana data center to exceed 250 billion price tag
Ransomware Crisis in 2026: 5,064 Organizations Affected in 135 Countries
Palo Alto Networks Addresses 13 Vulnerabilities
Critical Dell BIOS & Zimbra Flaws Expose Enterprise Systems
CoLoCity Launches New 1.0 MW Data Center Facility at Gulshan
Daily Cyber security update for 10. 07. 2026
How Hacker Compromise AWS Cloud Environment Using AI in 72 Hours
Mycelium Framework: First AI-as-a-Service Botnet
CrowdStrike Shows 5 New Prompt Injection Techniques for AI Agents
Critical GCP Dialogflow Vulnerability Allows Malicious Code Injection
A command injection flaw is found in Zoom Node MMR versions prior to 5.2.1716.0, impacting Zoom Node Meetings Hybrid (ZMH) and Zoom Node Meeting Connector (MC) setups. The vulnerability requires only network access and low-level privileges to exploit, with no user interaction necessary.
The vulnerability targets MMR modules running versions earlier than 5.2.1716.0, so identifying and patching these versions is crucial. Zoom’s Offensive Security team discovered this issue.
Zoom urges administrators to promptly update MMR modules to version 5.2.1716.0 or later.
The company released guidance in its Managing Updates for Zoom Node support documentation, offering step-by-step instructions for patching Zoom Node infrastructure.
