What is CVE-2026-53406?

CVE-2026-53406 is a high-severity vulnerability in Zoom Remote_control, classified under Insufficient Verification of Data Authenticity. CVSS score: 7.8/10. Published 2026-06-12.

How severe is CVE-2026-53406?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Zoom Remote_control

CVE-2026-53406

Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.

EPSS: 0.001 (0.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Zoom Remote_control
Zoom Communications Remote Control For Contact Center — versions 0

Weakness classification (CWE)

CWE-345 — Insufficient Verification of Data Authenticity

References

security@zoom.us (Vendor Advisory)

Frequently asked questions

What is CVE-2026-53406?: CVE-2026-53406 is a high-severity vulnerability in Zoom Remote_control, classified under Insufficient Verification of Data Authenticity. CVSS score: 7.8/10. Published 2026-06-12.
How severe is CVE-2026-53406?: High severity. CVSS v3 base score is 7.8 out of 10.