CVE-2026-53406
Quick assessment
Affected
Zoom Communications Remote Control for Zoom Contact Center
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Zoom Communications Remote Control for Zoom Contact Center是Zoom Communications的一个视频会议协作产品的远程控制工具。 Zoom Communications Remote Control for Zoom Contact Center 7.0.0之前版本存在安全漏洞，该漏洞源于数据真实性验证不足，可能导致经过身份验证的用户通过本地访问提升权限。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Zoom Communications | Remote Control for Zoom Contact Center | < 7.0.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-53406
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对数据真实性的验证不充分
Source: CVE Program / CVE List V5
Vulnerability Title
Zoom Communications Remote Control for Zoom Contact Center 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Zoom Communications Remote Control for Zoom Contact Center是Zoom Communications的一个视频会议协作产品的远程控制工具。 Zoom Communications Remote Control for Zoom Contact Center 7.0.0之前版本存在安全漏洞，该漏洞源于数据真实性验证不足，可能导致经过身份验证的用户通过本地访问提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Zoom Communications | Remote Control for Zoom Contact Center | 0 ~ 7.0.0 | - |
|
II. Public POCs for CVE-2026-53406
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-53406
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-53406 (1)
Same Patch Batch · Zoom Communications · 2026-06-12 · 3 CVEs total
| CVE-2026-53407 | 8.1 HIGH | Zoom Workplace 授权问题漏洞 |
| CVE-2026-53408 | 8.1 HIGH | Zoom Workplace 授权问题漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-345
-
CVE-2026-62204
SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install -
CVE-2026-58002
WWBN AVideo Authorization Bypass via Users_affiliations add. -
CVE-2026-66787
Lighthouse: lighthouse: cross-cluster dns spoofing via unval -
CVE-2026-53425
Missing InResponseTo validation in Samly allows acceptance o -
CVE-2026-44725
EMQX: Stale plugins allow grants amplify a compromised admin
V. Comments for CVE-2026-53406
No comments yet