CVE-2026-66641

A Cross Site Scripting (XSS) vulnerability exists in Video Conferencing applications using Zoom versions 4.6.8 and earlier, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to unauthorized actions being performed on behalf of the user, potentially compromising sensitive information. Organizations utilizing affected Zoom versions should prioritize patching to mitigate the risk of exploitation.