CVE-2026-30903: Critical severity Zoom Zoom Workplace vulnerability
Published Mar 11, 2026
·Updated
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.
Affected Software
5 affected components
Zoom Zoom Workplace<6.6.0
Zoom Workplace Desktop Windows<6.6.0
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.4.0<6.4.17
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.5.0<6.5.15
Zoom Workplace Virtual Desktop Infrastructure Windows>=6.6.0<6.6.10
Event History
Mar 11, 2026
CVE Published
via MITRE·02:52 PM
Data Sourced
via MITRE·02:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-30903?
CVE-2026-30903 is classified as a medium severity vulnerability.
2
What systems are affected by CVE-2026-30903?
CVE-2026-30903 affects Zoom Workplace for Windows versions before 6.6.0.
3
How do I fix CVE-2026-30903?
To mitigate CVE-2026-30903, upgrade Zoom Workplace to version 6.6.0 or later.
4
What type of vulnerability is CVE-2026-30903?
CVE-2026-30903 involves external control of file name or path leading to privilege escalation.
5
Can CVE-2026-30903 be exploited by authenticated users only?
CVE-2026-30903 can be exploited by unauthenticated users via network access.