Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
An unauthenticated user over the network can escalate their privileges on a Windows system running Zoom Workplace, requiring user interaction to trigger the vulnerability.
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch is available. See Zoom Security Bulletin ZSB-26023 at
Apply the latest Zoom Workplace updates available at Review and validate the patch details from Zoom's official security bulletin before deployment.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Feedly found the first article mentioning CVE-2026-108186 . See article
NVD published the first details for CVE-2026-108186
Links to Mitre Att&cks
Zoom Workplace for Windows - Improper Input Validation
Improper Input Validation Vulnerability in Zoom Workplace for Windows
Zoom Workplace for Windows 7.1.8 Fixes CVE-2026-108186 Critical Escalation of Privilege
Be the first to know critical vulnerabilities
Collect, analyze, and vulnerability reports faster using AI
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
