CVE-2026-108185

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-14: 110-14
Full discourse1 post
  • CCB Alert@CCBalert

    Warning: High severity Certificate Validation Flaws in #Zoom Clients. CVE-2026-108185 CVSS: 7.4, CVE-2026-108184 CVSS: 7.4. These flaws can lead to sensitive information disclosure over a network without authentication in Windows clients. #Patch #Patch #Patch

    02002208
    7.3K followersView on X

Explore more