Heise.De

Zoom Node Vulnerability CVE-2026-22844 Allows Remote Code Execution

First seen 23 Jan 2026, 22:10 UTC • Scworld

•49.0

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Zoom has addressed a critical vulnerability, CVE-2026-22844, affecting its Node servers, specifically the Multimedia Routers (MMRs) component. This command injection flaw allows attackers to execute arbitrary code through network access, posing significant risks to organizations using Zoom for meetings and video calls. Administrators are urged to install the security patch to mitigate potential threats.

How this analysis works

Attack Flow

7 entities, 12 inferred relationships (STIX 2.1).

Technique (2)

Malware
Zero-day Exploit

Vulnerability (1)

CVE-2026-22844

Affected Platform (4)

Node Meeting Connector MMR
Node Meetings Hybrid MMR
Node Multimedia Routers
Zoom Node

Relationships

CVE-2026-22844 targets Node Meeting Connector MMR
CVE-2026-22844 targets Node Meetings Hybrid MMR
CVE-2026-22844 targets Node Multimedia Routers
CVE-2026-22844 targets Zoom Node
Malware targets Node Meeting Connector MMR
Malware targets Node Meetings Hybrid MMR
Malware targets Node Multimedia Routers
Malware targets Zoom Node
Zero-day Exploit targets Node Meeting Connector MMR
Zero-day Exploit targets Node Meetings Hybrid MMR
Zero-day Exploit targets Node Multimedia Routers
Zero-day Exploit targets Zoom Node

Continue Reading

Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025 China-linked Cyber Group Expands Targeting to Southeastern Europe China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign China-linked UAT-7290 Targets Telcos in Cyberespionage Campaign UAT-7290 Cyber Espionage Targets South Asian Telecoms Cisco Fixes Critical AsyncOS Vulnerability Under Attack

Zoom Node Vulnerability CVE-2026-22844 Allows Remote Code Execution

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading