Live › vulnerability › CVE-2026-114176
Go to dashboardThe eRoom Zoom Meetings and Webinar plugin from DigitalME has a missing authorization check, so access control is not enforced on some actions. The sources do not say what data or actions an attacker can reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the eRoom eroom-zoom-meetings-webinar plugin at version 1.7.1 or earlier are affected. The sources do not say which roles or endpoints are involved, so whether an account is needed is unknown.
No product ranges from the sources yet.
1.7.1 are listed as affected1.7.1 once the vendor publishes one (unknown: the sources do not name a fixed version)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-114176")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.