Is CVE-2026-53408 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-53408 being exploited in the wild.

How severe is CVE-2026-53408?

High severity, with a CVSS score of 8.1, published 12 June 2026.

Which products and versions are affected?

Zoom Meeting SDK before 7.0.4 for Android, before 7.0.3 for iOS; Zoom Workplace before 7.0.4 for Android, before 7.0.3 for iOS.

Is there a fix for CVE-2026-53408?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-53408 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-53408?

Check whether you run Zoom Meeting SDK or Zoom Workplace at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-53408: Zoom Workplace improper authorization in custom URL scheme handler

CVE-2026-53408 · Severity: high · CVSS 8.1 · Published 2026-06-12

Zoom Workplace and Meeting SDK for mobile devices contain a security flaw in how they handle custom web links. An attacker could use a specially crafted link to gain unauthorized privileges within the application. This could lead to unauthorized access to user data or restricted app functions if a user interacts with a malicious link.

Technologies: Zoom Meeting SDK, Zoom Workplace. Vendors: Zoom.

Quick answers

Is CVE-2026-53408 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-53408 being exploited in the wild.
How severe is CVE-2026-53408?: High severity, with a CVSS score of 8.1, published 12 June 2026.
Which products and versions are affected?: Zoom Meeting SDK before 7.0.4 for Android, before 7.0.3 for iOS; Zoom Workplace before 7.0.4 for Android, before 7.0.3 for iOS.
Is there a fix for CVE-2026-53408?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-53408 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-53408?: Check whether you run Zoom Meeting SDK or Zoom Workplace at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability classified as Improper Authorization (CWE-939) exists in the custom URL scheme handler of Zoom's mobile clients. The root cause is insufficient validation of requests received via these schemes, which allows an unauthenticated remote attacker to trigger actions that should require higher privileges. While the attack vector is network-based, it typically requires user interaction (UI:R) such as clicking a malicious link. Successful exploitation allows for an escalation of privilege, potentially compromising confidentiality and integrity. The issue is resolved in Zoom Workplace for Android version 7.0.4 and iOS version 7.0.3.

Affected products

Zoom Workplace before 7.0.4 for Android, before 7.0.3 for iOS
Zoom Meeting SDK before 7.0.4 for Android, before 7.0.3 for iOS

Timeline

2026-06-09: advisory: Initial publication by Zoom (ZSB-26010)
2026-06-12: disclosed: NVD publication date

References

https://www.zoom.com/en/trust/security-bulletin/zsb-26010

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.