Zoom fixed critical Node Multimedia Routers flaw

Key Points:

• A critical command injection vulnerability (CVE-2026-22844) in Zoom Node Multimedia Routers (MMRs) allows for potential remote code execution.
• The flaw affects Node Meeting Connector and Node Meetings Hybrid MMR modules prior to version 5.2.1716.0, with a CVSS score of 9.9, indicating a high severity risk.
• Administrators are urged to update to the latest MMR version to mitigate the risk of exploitation.

Technical Details: The vulnerability allows an attacker with network access to execute arbitrary code on the affected MMRs, potentially compromising the integrity and confidentiality of the system.

MITRE ATT&CK Techniques:

• T1203 - Exploitation for Client Execution (Execution)

IOCs Mentioned: None mentioned