SIGNAL EVIDENCE LEDGER

Signals.

Every material announcement, advisory, release and lifecycle change appears once, with one stable link and its supporting evidence.

ZoomFeatureHighNewly announced 20 Oct 2026; High Frame Rate Screen Sharing confirmed available; Voice Translator expected Nov 2026; Bring Your Own Zoom expected Dec 2026; enhanced Microsoft Teams connectivity expected H1 2027

Zoom sets a mixed availability roadmap for meeting and room experience changes

Zoom Meetings and Zoom Spaces

Zoom announced Voice Translator for all-participant translated audio, High Frame Rate Screen Sharing, Bring Your Own Zoom for personal sign-in on shared rooms, and enhanced Microsoft Teams meeting connectivity from Zoom Rooms. High Frame Rate Screen Sharing is available now; the other highlighted capabilities are forecast from November 2026 through the first half of 2027.

Why it matters

Enable the released 60 fps sharing option only after validating Enhanced Media licensing, Ultra HD prerequisites and network capacity. Treat Voice Translator, shared-room personal sign-in and richer Teams interoperability as pilots until Zoom publishes release notes, licensing and tenant controls; the announcement is not proof that those features are deployable today.

High enterprise and government relevance because the announcement changes meeting accessibility, presentation quality, shared-room identity and cross-platform room planning, but most of the capabilities remain forecasts
ZoomPlatformHighNewly announced 20 Oct 2026; Microsoft Purview sensitivity-label integration described as available now; centralized AI management and deepfake risk detection expected Dec 2026; compliance archiving expected Jan 2027; custom guardrails expected Q1 2027

Zoom announces centralized AI governance and deepfake-risk controls

Zoom AI governance and meeting controls

Zoom announced Centralized AI Management, custom AI guardrails, Microsoft Purview sensitivity-label integration for Zoom Meetings and Whiteboard, Compliance Manager support for My Notes and Canvas, and real-time deepfake risk detection. Only the Purview label integration is described as available now; the other controls are forecast between December 2026 and Q1 2027.

Why it matters

Security and records teams can validate the available Purview label integration now. Do not place deepfake detection, centralized AI policy, custom guardrails or AI-output archiving into production control baselines until Zoom publishes licensing, regional availability, audit behaviour, detection limits and release evidence.

High enterprise and government relevance because the controls affect meeting classification, AI oversight, records retention and participant-risk workflows, while most remain announced rather than released
ZoomSecurityHighAction required; fixed versions are 7.2.0 and 7.1.9 in their respective branches; Zoom lists no exploitation status

Zoom patches high-severity certificate validation flaws across Workplace clients

Zoom Workplace / My Notes

Zoom bulletin ZSB-26022 says the My Notes feature in affected Windows, macOS, Linux, Android and iOS clients could allow unauthenticated network information disclosure. Affected branches are fixed in 7.2.0 or 7.1.9; Windows starts at 7.1.5 and the other listed platforms at 7.0.5.

Why it matters

Require Zoom Workplace 7.2.0 or the fixed 7.1.9 branch across managed endpoints, then verify My Notes-enabled populations first. Do not treat a server-side Zoom update as remediation for vulnerable installed clients.

High enterprise and government relevance because the issue spans desktop and mobile clients and requires endpoint-version enforcement
ZoomSecurityHighAction required; Zoom Rooms for Windows must be 7.1.7 or later, VDI Client for Windows 7.0.13 or later, and Workplace for Windows on a fixed 7.2.0 or 7.1.9 branch

Zoom patches a certificate validation flaw affecting Windows rooms and clients

Zoom Rooms for Windows / Zoom Workplace VDI

Zoom bulletin ZSB-26021 identifies a high-severity certificate validation issue that could allow unauthenticated network information disclosure. It affects Zoom Rooms for Windows before 7.1.7, Zoom Workplace for Windows in the listed 7.0.0-to-7.2.0 and 7.1.9 branches, and Zoom Workplace VDI Client for Windows from 7.0.11 before 7.0.13.

Why it matters

Prioritize Windows room and VDI inventories: move Zoom Rooms to 7.1.7 or later, VDI clients to 7.0.13 or later, and Workplace clients to the fixed 7.2.0 or 7.1.9 branch. Confirm each room image rather than assuming account-level controls remediate the installed client.

Direct Rooms & AV and meeting-platform relevance because dedicated Windows rooms, VDI clients and desktop clients have different fixed-version thresholds
ZoomSecurityHighAction required; fixed in Zoom Workplace 7.2.0 or later; Zoom lists no exploitation status

Zoom patches a high-severity buffer overflow in Workplace clients

Zoom Workplace / Zoom Phone

Zoom bulletin ZSB-26020 says a Zoom Phone feature in Zoom Workplace clients on all supported platforms before 7.2.0 contains a buffer overflow that may allow privilege escalation over the network under the bulletin's stated conditions.

Why it matters

Move all supported Zoom Workplace platforms to 7.2.0 or later through normal validation rings, with priority for Zoom Phone users. Track completion by endpoint platform; the advisory applies across the supported client estate, not only Windows.

High enterprise and government relevance because the affected range covers all supported Zoom Workplace client platforms
ZoomSecurityHighAction required; fixed in Zoom Workplace for Android 7.2.1 or later; Zoom lists no exploitation status

Zoom patches an Android custom-URL authorization flaw

Zoom Workplace for Android

Zoom bulletin ZSB-26019 says Zoom Workplace for Android before 7.2.1 contains an improper-authorization flaw in a custom URL scheme handler that may allow unauthenticated privilege escalation over the network with user interaction.

Why it matters

Enforce Zoom Workplace for Android 7.2.1 or later through managed app policy and verify adoption separately from desktop client compliance. Prioritize users who open meeting links or custom Zoom URLs from untrusted sources.

Relevant to enterprise and government mobile collaboration because Android requires a higher fixed version than the 7.2.0 baseline in the other new Zoom advisories
ZoomFeatureHighRevised by RoomWatch 2 Oct 2026; confirmed released 28 Sep 2026 with published platform builds; mobile availability may lag app-store approval

Zoom ships Rooms 7.2.0 across room and controller platforms

Zoom Rooms 7.2.0

Zoom's September 28 release record now provides 7.2.0 builds for Windows, macOS, appliances, iPad, room controllers, the web controller, Custom AV Controller and Zoom for Google Beam. The package adds My Notes in rooms, up to six companion devices, sensitivity labels, configuration-profile audit and drift controls, a refreshed controller interface, external-user AI restrictions, webinar room controls and Neat Pad Gen 2 controller support.

Why it matters

Move the release from roadmap review into controlled deployment. Prioritize test cases for information classification, AI restrictions, controller workflow, configuration drift and companion-device scale, and allow for mobile app-store approval lag before declaring fleet-wide completion.

High enterprise and government relevance because the planned release changes room AI controls, information classification, management workflows, controllers and the in-room experience
ZoomFeatureHighNewly announced 21 Sep 2026; confirmed in Zoom's released feature record; individual client and appliance delivery can still vary by platform

Zoom adds a guided deployment path and AI-assisted floor-map setup for Workspace Reservation

Zoom Workspace Reservation

Zoom's September 21 Workspace Reservation release adds a setup wizard for bulk mapping locations and Zoom Rooms, creating desks, assigning permissions, configuring check-in roles and defining deployment rules. It also adds automated floor-map placement, support for third-party meeting links, asset visibility on scheduling displays and certified Kleeo Desk Manager support.

Why it matters

Workplace teams can use the wizard to pilot before scaling, but should validate the auto-generated floor plan, calendar mappings, access policy and check-in rules before broad deployment. Zoom describes the map automation as AI-assisted; RoomWatch has not independently validated its accuracy.

High enterprise and government relevance for hybrid-work programs standardizing desk, room and workplace reservation workflows
ZoomFeatureHighNewly announced 21 Sep 2026; sensitivity labels listed as generally available; dashboard telemetry requires Zoom client 7.2.0 or later

Zoom expands meeting governance with sensitivity labels and application-activity reporting

Zoom Meetings governance controls

Zoom's September meeting release makes sensitivity classification labels generally available for applying policy-driven controls to recording, transcripts, summaries, whiteboards, encryption and sharing. The Meeting Apps dashboard now reports RTMS and livestreaming attempts, allowed or blocked outcomes, affected meetings and users, with client 7.2.0 or later required for activity tracking.

Why it matters

Security and collaboration owners should define a small, enforceable label set, test the resulting meeting policies and confirm managed clients meet the 7.2.0 telemetry requirement. Labels improve control only when their policy mappings and user guidance are maintained.

High enterprise and government relevance for regulated meetings, third-party meeting applications, streaming and evidence-based policy enforcement
ZoomSoftwareHighNewly announced 18 Sep 2026; confirmed released for Windows, macOS, appliances and iPad; security details not specified on the release-note page

Zoom Rooms 7.1.7 ships security enhancements across room platforms

Zoom Rooms 7.1.7

Zoom released Rooms 7.1.7 for Windows, macOS, appliances and iPad on September 18. The release notes classify the update as security enhancements and minor bug fixes; controller and other platform builds were not listed in this release table.

Why it matters

Administrators should compare deployed room versions with the published 7.1.7 builds and stage updates through their normal validation rings. Zoom does not identify the underlying security changes on this release-note page, so do not infer a specific CVE or exposure without a linked bulletin.

High enterprise and government relevance for centrally managed Zoom Rooms because the vendor explicitly classifies the release as containing security enhancements
ZoomFeatureMediumReleased Aug 26 for the applicable web release; vendor enablement required and APIs unchanged

Zoom expands real-time room states in its administration dashboard

Zoom Rooms dashboard / web portal

Zoom's Aug 26 web release adds more specific Zoom Room states—Available, Offline, In a Meeting, In a Calendar Event, Presenting, On a Call and Under Construction—and aligns the web dashboard more closely with device-reported status. Zoom states that the change does not alter the List Zoom Rooms or Dashboard APIs in this release and requires vendor enablement.

Why it matters

Operations teams can triage room conditions with less ambiguity, but integrations that consume Zoom's APIs will not automatically receive the richer state model. Validate the enabled web experience, alerting workflows and any API-fed service dashboards before changing support procedures.

Relevant to enterprise and government Zoom Rooms operations, service desks and monitoring integrations
ZoomFeature / UXMediumReleased

Events analytics now reach beyond the Zoom-hosted experience

Event

Zoom Events and Webinars Plus added off-platform livestream viewer data, hub-level AI Analytics and additional post-event reporting paths.

Why it matters

Event teams gain a more complete audience picture, but the useful output still depends on disciplined event, consent and CRM data practices.

Event experience
ZoomLifecycle / adminMediumReleased

Webinar setup and asset governance received operational controls

Event

The release adds breakout configuration during setup, certificate release controls, recurring-lobby FAQs, Zapier webhooks and defined handling of assets when a user is removed.

Why it matters

These are workflow improvements, not just attendee features: they reduce manual production work and make ownership transitions less ambiguous.

Event experience
ZoomSecurityHighNewly discovered by RoomWatch 21 Sep 2026; CVE-2026-53413; Zoom rates High, CVSS 8.3; fixed versions published; exploitation not established by this advisory

Zoom fixes meeting-annotation flaw affecting Zoom Rooms and clients

Zoom Rooms and Zoom meeting clients — annotator

Zoom bulletin ZSB-26015 says a missing bounds check in its annotation function may let a meeting participant execute code on another participant's device over the network. The bulletin lists Zoom Rooms on all supported platforms before 7.1.0 among affected products, alongside specified Zoom Workplace, VDI and SDK versions.

Why it matters

Room and endpoint administrators should inventory affected Zoom Rooms and companion clients, then verify the fixed versions in Zoom's bulletin. Do not infer active exploitation from the advisory alone.

High enterprise and government relevance for Zoom Rooms and managed meeting clients participating in meetings where annotation is used
ZoomSecurityUnratedAction required

Zoom issued a desktop-client security enhancement without public severity detail

Meeting + event

Zoom lists a security enhancement in Workplace desktop app 7.0.6 and states that it is also included in 7.1.5 and later.

Why it matters

The correct response is version compliance, not severity speculation. The public note does not identify a CVE, exploit condition or risk rating.

Meeting + event experience
ZoomFeature / UXMediumReleased

Voice translation reached the Workplace client release train

Meeting

Zoom Workplace 7.1.5 includes Voice Translator and the Translate My Voice experience, with a separately dated backend dependency noted by Zoom.

Why it matters

Availability depends on both client and service state. Pilot testing should cover latency, language accuracy, consent and how translated audio is represented in recordings or transcripts.

Meeting experience
ZoomFeatureMediumReleased in the web portal

Zoom adds room, desk and asset-utilization insights

Workspace Reservation

A new web dashboard shows busiest hours, daily room and desk utilization, peak availability and equipment use, with filters for building, floor and department.

Why it matters

The data can support capacity planning, but bookings are not the same as occupancy and peak-hour summaries can hide local patterns. Validate sensor and reservation inputs before using the dashboard to justify real-estate or room-technology reductions.

Relevant to enterprise workplace planning; government use requires privacy, retention and data-residency review
Rooms & AV#2026-06-17-zoom-zoom-spaces
ZoomPlatformHighPublic beta / staged H2 rollout; current Cisco guidance expects GA on select devices starting Q4 2026, replacing the original September target; GA not confirmed as of 8 Sep

Zoom broadens rooms into an AI-led workplace platform

Zoom Spaces

Zoom announced adaptive camera and voice improvements, Digital Signage Plus, expanded Custom AV options, Google Beam support and native Zoom Rooms on selected Cisco devices. Cisco's current product page now expects general availability on select devices starting in Q4 2026, later than the original September target.

Why it matters

The strategically important part is hardware and protocol openness, not the AI label. Cisco device support could lower switching costs for mixed Webex/Zoom estates, but the moved availability target reinforces that beta access is not production readiness. Validate eligible device models, licensing and the final GA release before changing room standards.

High for multi-platform estates and professional AV rooms
ZoomFeature / UXMediumReleased

Zoom consolidates meeting disclaimers into one join notice

Meeting

Zoom released a consolidated notice experience that presents active custom disclaimers in a single join modal across desktop and mobile clients.

Why it matters

A single notice can reduce prompt fatigue, but consolidation also makes wording and acknowledgement design more important. Compliance teams should verify which notices are combined and how acceptance is recorded.

Meeting experience
ZoomFeatureMediumReleased in Zoom Rooms 7.0.5 on supported platforms

AI Note Taker controls extend into Zoom Rooms

Zoom Rooms 7.0.5

Zoom Rooms 7.0.5 lets room hosts enable or disable participant access to My Notes and lets people in the room stop note taking from the room controller or touch interface.

Why it matters

Bringing note controls onto the shared-room interface reduces dependence on a host's personal client, but it also makes transcription and derived meeting artifacts a room-governance issue. Consent, retention and role behavior should be tested before broad enablement.

Relevant to enterprise and government Zoom Rooms using AI note-taking workflows
ZoomPlatformHighEnforced May 2; superseded by later quarterly minimums where applicable

Zoom enforces a 5.17.5 minimum across Zoom Rooms devices

Zoom Rooms quarterly lifecycle policy

Zoom's May 2 quarterly lifecycle enforcement set version 5.17.5 as the minimum for Zoom Rooms on Windows, macOS, iPad and appliances, including iOS and Android controllers, scheduling displays and whiteboards.

Why it matters

This was an operational deadline, not an optional feature update. Unsupported room software can be blocked from service, so fleet version telemetry and controller coverage must be part of the same compliance check.

Material to every managed Zoom Rooms estate, including peripheral controllers and scheduling displays
ZoomLifecycle / adminHighReleased

Zoom lets regulated organizations cap archived meeting duration

Meeting

Zoom added a 5-to-16-hour maximum duration for archived meetings. When the limit is reached, regulated users leave automatically; if the host is regulated, the meeting ends.

Why it matters

This converts an archiving constraint into meeting termination behavior. Regulated organizations need an explicit duration policy and user communication so a compliance control does not become an unexpected operational outage.

Meeting experience
ZoomSecurityMediumNewly discovered by RoomWatch 8 Oct 2026; vendor-confirmed historical advisory; fixed in Zoom Rooms 6.5.1; no CISA KEV listing found

Zoom Rooms authentication bypass exposed information on clients before 6.5.1

Zoom Rooms clients before 6.5.1

Zoom bulletin ZSB-25039 confirms that an unauthenticated network user could bypass authentication and disclose information on Zoom Rooms for Windows, macOS, Android, iOS and iPad before version 6.5.1. Zoom rates CVE-2025-58133 Medium at CVSS 5.3.

Why it matters

Inventory any retained or isolated Zoom Rooms clients and verify version 6.5.1 or later across every platform. Current fleets should already exceed that baseline, but legacy images, spares and restricted networks should be checked rather than assumed safe.

Relevant to enterprise and government Zoom Rooms estates because the flaw is network reachable without authentication, although user interaction is required and fixed versions have been available since 2025