


Critical
CVE-2026-22844
Other
January 21, 2026
Zoom has fixed a critical command injection flaw in Node Multimedia Routers (MMRs) that could allow remote code execution. Update to patched versions.
Zoom Node MMR
Severity is Critical. Exploitation may lead to remote code execution, service disruption, unauthorised system control, and potential lateral movement within the environment. Organisations operating hybrid or on-premise Zoom meeting infrastructure face elevated operational and security risk.
Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.
Discuss Your Security ExposureExplore Managed Detection and ResponseAssess your risk
Identify affected systems
Plan remediation
Practical, vendor-aligned guidance
Get expert support
From our 24/7 security team
Get the latest threat intelligence and security advisories from Smarttech247.
View All Threat UpdatesDownload the complete analysis, including detailed technical findings and references.