CVE-2022-28758: Zoom On-Premise Meeting Connector Mmr

High severity, CVSS 8.2. EPSS: 0.7% chance of exploitation in the next 30 days.

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions.

Affected products

• Zoom Zoom On-Premise Meeting Connector Mmr: before 4.8.20220815.130 (fixed in 4.8.20220815.130)

Published 2022-09-16. Last modified 2026-06-17.