Critical severity9.6NVD Advisory· Published Mar 11, 2026· Updated May 14, 2026

CVE-2026-30903

Description

External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoom Video Communications, Inc./Workplace Desktop
cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*
Range: <6.6.0
Zoom Video Communications, Inc./Workplace Virtual Desktop Infrastructure
cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*
Range: >=6.4.0,<6.4.17
Zoom Video Communications, Inc./Workplacellm-fuzzy
Range: <6.6.0
Zoom Communications/Zoom Workplacev5
Range: see references

Patches

Vulnerability mechanics

References

www.zoom.com/en/trust/security-bulletin/zsb-26005nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000