A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to conduct remote code execut…

A Command Injection vulnerability affects Zoom Node Multimedia Routers (MMRs) in versions before 5.2.1716.0. The vulnerability allows meeting participants to execute remote code on the MMR through network access. This represents a significant security risk as it enables unauthorized remote code execution by meeting participants. The vulnerability has been assigned CVE-2026-22844 and requires updating to version 5.2.1716.0 or later to remediate.