CVE-2026-53406: Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7

Synopsis

Insufficient verification of data authenticity in the Remote Control feature of Zoom Contact Center for Windows allows a locally authenticated attacker to escalate their privileges on the affected system. The vulnerability is reached via local access, meaning the attacker must already have a shell or process on the host, and a low-privilege account is sufficient to trigger it. Successful exploitation gives the attacker elevated control over the system, encompassing full confidentiality, integrity, and availability impact. A patched-image rebuild at version 7.0.0 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network-based access path is required.

• AuthenticationRequired

  Any low-privilege local account is sufficient to attempt exploitation; no elevated or administrative credentials are needed.

• Victim interactionNot required

  No action from another user or victim is required to trigger the vulnerability.

• Attack complexityDetail

  The exploit is reliable and condition-free, with no race conditions or special environmental factors required.

Blast Radius

• A successful attacker reads files, credentials, or secrets on the host that their original low-privilege account could not access.
• The attacker modifies system files, configurations, or persisted data at an elevated privilege level.
• The attacker can crash, disable, or otherwise disrupt the affected system or its services.