AV/VC industry
intelligence.

Critical Zoom annotation flaws expose Neat room devices to in-meeting compromise

Neat says three Zoom annotation vulnerabilities can let a meeting participant crash or execute code on another participant's device. All Neat Zoom Rooms devices below Zoom Rooms 7.1.5 are affected.

The attacker needs meeting access but the victim does not need to click or download anything. Zoom's server-side filter protects standard meetings, not end-to-end encrypted meetings, so version verification matters more than relying on the mitigation.

ClickShare adds Bar Pro controls, Miracast, deployment presets and room-level Teams telemetry

Barco's summer release adds dual-display and direct camera/audio controls for ClickShare Bar Pro, Miracast, managed Desktop App presets, LocalView privacy controls and unique Button reporting in the Teams Rooms Pro Management Portal.

The operational value is stronger than the marketing: centralized presets and per-room Button identity can reduce configuration drift. However, the extra usage telemetry needs privacy review, and Windows Driver 1.24 becomes mandatory with the autumn release.

Dell consolidates huddle-room conferencing into a 43-inch monitor

Dell launched a 43-inch 4K display with integrated camera, microphones, speakers and USB-C for rooms of up to six people. It is Zoom Rooms certified and available worldwide as of August 6.

The integration can reduce peripheral count and installation variance, but it also concentrates display, camera, audio and USB hub failures in one endpoint. Validate acoustic coverage, serviceability and certified-platform behavior before standardizing.

Teams Rooms update begins the Windows 11 25H2 transition

Microsoft released Teams Rooms app 5.6.210.0 with Windows 11 25H2 support. Once installed, eligible Windows 11 room systems are expected to upgrade to 25H2 automatically within about one week.

This is a lifecycle event, not a cosmetic app update. Room owners should coordinate change windows, validate certified peripherals and monitor release health rather than allowing an OS transition to appear as unexplained fleet variance.

Extron extends USB-C video, data and power over one CAT 6A link

Extron announced a 4K/60 USB-C DTP3 transmitter carrying uncompressed video, audio, USB 10 Gbps data, power and control up to 100 metres, with 60 W native charging or 100 W using an optional inserter.

The product can simplify lectern and meeting-room cabling where USB peripherals and charging must travel with video. The trade-off is deeper dependence on Extron's DTP3 ecosystem; validate receiver compatibility and the cost of the optional 100 W power path.

HP fixes high-severity Android privilege escalation across Poly devices

HP says a local attacker already able to execute code could exploit CVE-2025-48543 to escalate privileges. Fixed minimums are PolyOS 4.7.0, TCOS 6.7.0, CCX 9.4.0 and Trio C60 9.4.0.

This is not an unauthenticated remote takeover, but it can turn an initial device compromise into full control. Fleet owners should verify versions in Poly Lens and prioritize shared or physically exposed devices.

Critical unauthenticated remote-code-execution flaw affects Poly PrivateConnect

HP rates the network-reachable flaw CVSS 9.8 and says it requires no privileges or user interaction. Pexip-backed PrivateConnect deployments should move to fixed releases 38.2, 39.2, 40.1 or 41.

This is a collaboration-infrastructure compromise path, not a room-appliance bug. Self-hosted and high-assurance estates should treat version verification as an immediate security action and confirm whether the service is externally reachable.

MAXHUB introduces an Android 15 scheduling panel built on MDEP

MAXHUB detailed an 11-inch room scheduling panel with long-range status lights, anti-glare display treatment, PoE or Wi-Fi 6 connectivity, and a universal mounting kit for walls, glass, mullions and junction boxes.

The useful change is glanceable room status paired with a current Android baseline and simpler physical deployment. MAXHUB's Zero Trust and lifecycle language is vendor-asserted; buyers still need certification, patch-policy, management-platform and regional-availability evidence.

Actively exploited SD-WAN privilege escalation advisory updated

Cisco updated fixed-release guidance after observing exploitation requiring existing privileged access or a chained compromise.

This is not a room-endpoint flaw, but the AV/VC control plane depends on the enterprise network. Treat it as an infrastructure dependency, not a reason to emergency-patch room devices.

Q-SYS opens Beijing experience center

The new center demonstrates Q-SYS across executive rooms, education, hospitality, entertainment and other high-impact spaces.

The announcement is commercially relevant in China but does not change product capability. Track channel and support depth before treating this as proof of broader regional execution.

Teams Rooms adds walk-up reservation and removes Together Mode

A July 20 web-client build added a Reserve button when a room is available, allowing immediate booking from the room calendar. Microsoft also deprecated the Together Mode view across Teams clients.

Walk-up booking removes a common room-ownership ambiguity, but only for Teams Rooms Pro estates where admins permit it. Together Mode removal is a real interface loss; training and room standards should stop referencing it.

Biamp adds network API control and fleet management to existing MPX 250 hardware

Firmware 1.3.0 adds a network API for source switching, device status and room automation, plus integration with Biamp Workplace through Workplace Tools for remote configuration and firmware management.

The update can reduce button presses and on-site support without a hardware replacement or added licence. That value depends on disciplined API authentication, network segmentation and regression testing of automated room logic.

Cisco moves device and workspace investigation toward conversational operations

Cisco described AI Assistant search, contextual Q&A, natural-language report analysis and workspace diagnostics using device status, usage, performance, configuration and diagnostic telemetry.

This could shorten triage for broad Webex estates, but natural-language answers are not closure evidence. Operators still need cited telemetry, audit trails, role boundaries and human approval before acting on configuration recommendations.

Microsoft consolidates Windows and Android Teams device management

The Pro Management portal can now monitor health, inventory and analytics for Windows and Android devices, while management of Android Teams Rooms, panels and phones moves from Teams admin center.

A single operational surface can reduce tool switching and inconsistent ownership across manufacturers. The migration also creates process risk: roles, runbooks, integrations and training tied to Teams admin center need review.

Zoom adds room, desk and asset-utilization insights

A new web dashboard shows busiest hours, daily room and desk utilization, peak availability and equipment use, with filters for building, floor and department.

The data can support capacity planning, but bookings are not the same as occupancy and peak-hour summaries can hide local patterns. Validate sensor and reservation inputs before using the dashboard to justify real-estate or room-technology reductions.

HP refreshes room compute around Intel Core Ultra and integrated NPUs

HP's Windows room compute became available through select resellers in July. Studio 7 is Zoom-certified while Microsoft Teams certification remains pending; Studio 5 Teams certification is also planned. VideoOS 5.1 remains expected in Q3 2026.

NPUs in room compute are becoming a lifecycle hedge for future local AI features. The practical test is whether new AI capabilities reduce support load without shortening certified hardware life.

Zoom broadens rooms into an AI-led workplace platform

Zoom announced adaptive camera and voice improvements, Digital Signage Plus, expanded Custom AV options, Google Beam support and native Zoom Rooms on selected Cisco devices.

The strategically important part is hardware and protocol openness, not the AI label. Cisco device support could lower switching costs for mixed Webex/Zoom estates; most capabilities still need availability and operational validation.

Biamp joins MDEP and moves deeper into room compute and control

Biamp introduced the Android-based Devio UCX with integrated DSP, joined Microsoft Device Ecosystem Platform, and launched Workplace Control for fleet-scale automation.

This expands Biamp from specialist audio into the room platform and management layers. Buyers should test support boundaries carefully: a broader stack can simplify ownership, but also increases dependency on one vendor.

Webex browser open-redirect vulnerability disclosed

Cisco disclosed CVE-2026-20178, a medium-severity open redirect affecting the browser-based Webex App. No workaround was listed.

The exploit depends on social engineering and is not a room takeover path. Still, high-assurance environments should confirm service remediation and reinforce approved-link controls.

Neat previews agentic management and new large-room framing

Neat announced a Pulse MCP approach to agentic room management and Intelligent Framing aimed at making large-room conversations easier to follow.

Natural-language operations could reduce triage time, but it also creates a new privileged management surface. Require auditability, least-privilege controls and human approval for write actions.

Yealink extends device-management data into Microsoft Places

Yealink announced a YMCS integration with Microsoft Places intended to support workplace deployment and space intelligence.

This follows the broader shift from device monitoring to occupancy and workplace analytics. Buyers need clear data residency, retention and consent answers before enabling cross-platform telemetry.

ClickShare Hub adds wireless BYOD for Zoom, Webex and Google Meet

Barco added wireless use of room display, camera, microphones and speakers for third-party meetings alongside the Hub's Teams Rooms experience.

This directly addresses multi-platform meeting friction. Security teams should assess wireless trust boundaries, guest-network design and the operational cost of supporting two room modes.

ClickShare earns ANSSI CSPN certification

The French cybersecurity agency awarded first-level security certification to the ClickShare CX-50 2nd generation after independent assessment.

Independent certification materially strengthens procurement evidence, particularly in Europe and regulated sectors. It is product/version-specific and should not be generalized to the entire portfolio.

Shure packages IntelliMix room systems for Zoom Spaces

Shure announced preconfigured Zoom Rooms kits for small through large rooms and a Foundation system combining Windows compute, DSP and touch control.

Prevalidated bundles can reduce design variance and speed deployments. The claim that better audio improves AI output is plausible, but enterprises should measure transcription accuracy in their own acoustic conditions.

Q-SYS expands into scalable network video distribution

The NVM Series adds native, low-bandwidth network video endpoints and no-code configuration intended for deployments with hundreds of endpoints.

A unified audio, video and control stack can reduce programming overhead. Government designs should scrutinize multicast behavior, encryption, segmentation and offline management before standardization.

Q-SYS launches a Windows Teams Rooms collaboration bar

Q-SYS introduced a Windows-based RoomSuite collaboration bar, a scheduling panel, and Microsoft Places data integration.

Q-SYS is moving down-market from bespoke rooms into repeatable spaces. Its differentiation depends on whether platform-level manageability survives simpler procurement and support models.

Teams Rooms adds agent, identity and public-sector capabilities

Microsoft highlighted Facilitator skills, IntelliFrame people labels, improved event-room controls and expanded Teams Rooms on Android support for DoD customers.

Room-aware agents and participant identity can improve hybrid equity, but both raise governance questions around voice activation, external knowledge access, biometric enrollment and meeting data retention.

Sennheiser updates its mid-size ceiling microphone offer

The TCC M Plus targets simpler deployment, scalable management and tighter integration for medium collaboration and learning spaces.

The value is deployment consistency rather than a new room architecture. Compare total commissioning time, coverage and management depth against Shure and Biamp alternatives.