Critical Zoom Command Injection Vulnerability Enables Remote Code Execution

Cyberpress • January 21, 2026

Share: View original

The flaw, tracked as CVE-2026-22844, exploits command injection vulnerabilities in MMR components and poses an immediate threat to organizations ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Zoom Command Injection Vulnerability Allows Remote Code Execution A critical command injection vulnerability in Zoom's Node Multimedia Routers (MMRs), tracked as CVE-2026-22844, has been disclosed. This flaw could permit meeting participants to execute arbitrary code on affected systems, posing a significant risk to organizations using Zoom's services. Immediate patching is required to mitigate this threat. 3 sources 73

Extracted Entities

Attack Types (2)

Command Injection Remote Code Execution

CVEs (1)

Platforms (1)