{"affected":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Zoom Workplace","source":"CNA: Zoom","vendor":"Zoom Communications","versions":[{"lessThan":"7.1.8","status":"affected","version":"7.1","versionType":"custom"}]}],"cveId":"CVE-2026-108186","cwes":["CWE-20"],"description":"Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.6,"severity":"critical","source":"CNA: Zoom","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},{"score":9.6,"severity":"critical","source":"NVD: security@zoom.us","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794374356987,"publishedAt":1794324741570,"references":[{"source":"CNA: Zoom","tags":[],"url":"https://www.zoom.com/en/trust/security-bulletin/zsb-26023"},{"source":"security@zoom.us","tags":[],"url":"https://www.zoom.com/en/trust/security-bulletin/zsb-26023"}],"remediation":[],"revision":"a36fc7476f454acd23243c976c4bf9d7a5230746c24083f3cdd5d711cd060471","sources":[{"modifiedAt":1794372977033,"name":"CNA: Zoom","retrievedAt":1794373707976,"url":"https://www.cve.org/CVERecord?id=CVE-2026-108186"},{"modifiedAt":1794374356987,"name":"NVD","retrievedAt":1794377790215,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108186"}],"ssvc":{"assessedAt":1794268800000,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2026-108186","updatedAt":1794377790215}