CVE-2026-108185
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.
Published Oct 13, 2026 · updated Oct 15, 2026 · Zoom Communications Zoom Clients
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · CIRCL Vulnerability Lookup
Detected
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.
Oct 15, 2026 · CIRCL Vulnerability Lookup
Updated
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.
Affected
- vendor Zoom Communications Zoom Clientsversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-108185
Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-108185
Official CVE identifier
cve.org