Zoom Rooms for Windows 代码问题漏洞

Zoom Rooms for Windows is a meeting software developed by the American company Zoom. Versions of Zoom Rooms for Windows prior to 7.0.0 contained a code vulnerability. This vulnerability stemmed from an insecure search path within the installer, which could allow authenticated users to gain elevat...

CVE-2026-32112

ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form renders user-controlled parameters via Python f-strings with no HTML escaping. An attacker who can reach the OAuth endpoint and convince the server operator to follow a crafted authorization URL could execute...