Zoom Video Communications Workplace: Mehrere Schwachstellen ermöglichen Privilegieneskalation
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Zoom Video Communications Workplace ausnutzen, um seine Privilegien zu erhöhen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-44962 linked CVEs
Open advisory with all CVEs
More on Communications
Other advisories
- MediumCVE-2026-128910Use of hard-coded credentials (CWE-798) on the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26, with 1300 communications board…
- HighCVE-2026-128908OS command injection (CWE-78) in the network-configuration handling of the management service (uavmonitor_usbv1) of the 1300 communications board in DJI Aero…
- MediumCVE-2026-128907Missing authentication for a critical function (CWE-306) in the management service (uavmonitor_usbv1) of the 1300 communications board in DJI AeroScope Mobil…
- HighCVE-2026-61674Oracle Communications: Mehrere Schwachstellen
- CriticalCVE-2026-108187Zoom Video Communications Workplace: Mehrere Schwachstellen ermöglichen Privilegieneskalation
- MediumCVE-2026-14918Axis Communications AB Signed Video Framework: Lesen außerhalb des zugewiesenen Speichers (Out-of-bounds Read)
- MediumCVE-2026-14918Axis Communications AB Signed Video Framework: Lesen außerhalb des zugewiesenen Speichers (Out-of-bounds Read)
- HighCVE-2026-115338Insufficient protection of communications in Progress WS_FTP Server versions prior to 2025.0.5 could allow a network attacker to intercept sensitive informat…
Other news entries
- FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’NewsSecurityWeek
- Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware EcosystemNewsThe Hacker News
- Attacken auf Cisco UCS Central Software und Unified CM können bevorstehenNewsheise Security
- Cisco Unified Communications Manager (CUCM): Schwachstelle ermöglicht Cross-Site ScriptingVulnerabilityBSI CERT-Bund
- Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityNewsCisco PSIRT
- Oracle Communications Applications: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil BackdoorNewsThe Hacker News
- SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malwareNewsESET WeLiveSecurity
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4496
ID