Critical Zoom Command Injection Vulnerability Enables Remote Code Execution

Cybersecuritynews •Abinaya • January 21, 2026

A critical command injection vulnerability in Node Multimedia Routers (MMRs) could allow meeting participants to execute arbitrary code on affected systems. The vulnerability, tracked as CVE-2026-22844, carries a CVSS severity rating of 9.9, the highest possible score, indicating an extremely dangerous threat requiring immediate remediation. Zoom Command Injection Vulnerability The command injection flaw exists in […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Zoom Command Injection Vulnerability Allows Remote Code Execution A critical command injection vulnerability in Zoom's Node Multimedia Routers (MMRs), tracked as CVE-2026-22844, has been disclosed. This flaw could permit meeting participants to execute arbitrary code on affected systems, posing a significant risk to organizations using Zoom's services. Immediate patching is required to mitigate this threat. 3 sources 73

Extracted Entities

CVEs (1)

CVE-2026-22844

Platforms (1)

Zoom