InfoSecBulletin Cybersecurity for mankind
A critical command injection flaw in Node Multimedia Routers (MMRs) may let meeting participants run arbitrary code on vulnerable systems. CVE-2026-22844 is a highly critical vulnerability with a CVSS score of 9.9, indicating an urgent need for immediate action.
Zoom Command Injection Vulnerability:
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
A command injection flaw is found in Zoom Node MMR versions prior to 5.2.1716.0, impacting Zoom Node Meetings Hybrid (ZMH) and Zoom Node Meeting Connector (MC) setups. The vulnerability requires only network access and low-level privileges to exploit, with no user interaction necessary.
The vulnerability targets MMR modules running versions earlier than 5.2.1716.0, so identifying and patching these versions is crucial. Zoom’s Offensive Security team discovered this issue.
Zoom urges administrators to promptly update MMR modules to version 5.2.1716.0 or later.
The company released guidance in its Managing Updates for Zoom Node support documentation, offering step-by-step instructions for patching Zoom Node infrastructure.
