NITDA warns Zoom users over vulnerability that could allow attackers take over accounts

Nigeria's National Information Technology Development Agency (NITDA) has issued a warning to Zoom users about a critical vulnerability that could enable attackers to gain unauthorized access to accounts. The vulnerability, identified as CVE-2026-53412, is a flaw in Zoom's application that stems from improper input validation. This weakness could be exploited remotely over a network without any need for authentication, potentially allowing unauthorized individuals to take control of user accounts.

The attackers could then access sensitive information such as confidential meetings, chat conversations, recorded sessions, and shared files. NITDA has advised all users to update their Zoom applications to the latest version (7.0.0 or later) to mitigate the risk. Additionally, users are strongly encouraged to implement additional security measures, such as multi-factor authentication (MFA), to further protect their accounts.

NITDA emphasized that a successful compromise could expose confidential organizational, governmental, or personal data, potentially enabling attackers to impersonate legitimate users for nefarious purposes such as phishing, fraud, or social engineering attacks.