Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation

Zoom WordPress plugin 4.6.6 contains a broken authentication caused by disabled nonce verification in an AJAX handler, letting unauthenticated attackers generate valid Zoom SDK signatures and retrieve the Zoom SDK key. id: CVE-2026-1368 info: name: Video Conferencing with Zoom API 4.6.6 -...

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

tangalanga

Tangalanga Escáner de conferencias Zoom. Este escáner verificará un ID de reunión aleatorio y devolverá información si está disponible. Instalación Primero intenta ver si hay alguna versión precompilada para la fecha: https://github.com/elcuervo/tangalanga/releases. Estas versiones ya tienen un...

Zoom-dll-hijacking

Zoom-dll-hijacking A dll hijacking vulnerability in zoom meeting 5.1.3 Affected Windows version Windows 7 or less Windows Server 2008 Any other windows system that doesn't have SHCore.dll present. Usage Copy the dbghelper.dll and SHCore.dll to following location...

EUVD-2026-62951

In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by invoking one of the create meeting, update meeting, or update user settings actions, because the affected password and...

CVE-2026-76386

In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by invoking one of the create meeting, update meeting, or update user settings actions, because the affected password and...

CVE-2026-76386 Information Disclosure through Action Parameters in Zoom app for Splunk SOAR

In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by invoking one of the create meeting, update meeting, or update user settings actions, because the affected password and...

CVE-2026-76386

In Zoom app for Splunk SOAR versions below 3.2.2, the "password" and "pmi_password" action parameters are not masked, causing cleartext exposure of Zoom meeting passwords and personal meeting ID passwords in the UI when a user with action-running privileges invokes create/update meeting or update...

CVE-2026-66641

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

EUVD-2026-60926

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66641

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66641

The WordPress Video Conferencing with Zoom plugin (versions

CVE-2026-66641 WordPress Video Conferencing with Zoom plugin <= 4.6.8 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

WordPress Video Conferencing with Zoom plugin <= 4.6.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Video Conferencing with Zoom versions = 4.6.8...

Zoom Workplace < 7.1.5 Vulnerability (ZSB-26017)

The version of Zoom Workplace installed on the remote host is prior to 7.1.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of anoth...

Zoom Workplace VDI Client < 7.0.11 Vulnerability (ZSB-26016)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26016 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting...

Zoom Workplace < 7.1.0 Vulnerability (ZSB-26016)

The version of Zoom Workplace installed on the remote host is prior to 7.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26016 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to...

Zoom Workplace VDI Client < 7.0.11 Vulnerability (ZSB-26017)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code...

PT-2026-77069

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

“Zoomsday” flaws could let one Zoom participant attack another

Researchers have found three vulnerabilities in the popular Zoom meeting platform that could let one meeting participant attack another through malicious collaboration data. The vulnerabilities, tracked as CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, affect the code Zoom uses to process...