Indian Govt Warns Zoom Users of Critical 'Command Injection Vulnerability'

• CERT-In issued a security alert on February 2, 2026, regarding a 'command injection vulnerability' in Zoom's enterprise version.
• The vulnerability affects the Zoom Node Multimedia Router (MMR) and could allow hackers to bypass security, steal data, and gain elevated privileges.
• Successful exploitation could lead to data theft, integrity issues, elevated privileges, or denial of service on targeted systems.
• Affected versions include Zoom Node Meetings Hybrid (ZMH) MMR and Zoom Node Meeting Connector (MC) MMR prior to 5.2.1716.0.
• Zoom advises all affected enterprise users to update their MMR to the latest version through IT administrators immediately.

Why It Matters: Indian government warns enterprise Zoom users about a critical security flaw requiring immediate updates.