Asus and Zoom Release Security Patches for Critical Vulnerabilities
Asus and Zoom have issued security updates to address critical vulnerabilities in their products, including flaws that could lead to command execution and privilege escalation.
Computer maker Asus has released an advisory detailing four vulnerabilities affecting certain router firmware versions. These flaws, categorized as high- and medium-severity, could potentially allow attackers to execute arbitrary commands with root privileges or overwrite memory, leading to system instability or crashes.
Zoom has concurrently patched two significant vulnerabilities within its Workplace for Windows application. The most critical of these is an unauthenticated privilege escalation bug, identified as CVE-2026-108186, which carries a severe CVSS score of 9.6. This flaw could grant unauthorized access and elevated permissions to attackers.
A second vulnerability in Zoom Workplace for Windows, CVE-2026-108187, also permits remote, unauthenticated attackers to escalate their privileges, albeit with a slightly lower CVSS score of 8.1. Both issues have been addressed in Zoom Workplace for Windows versions 7.1.8 and later. Zoom has stated that there is no indication of these vulnerabilities being exploited in the wild.
In addition to these specific vendor updates, the cybersecurity landscape remains active with other notable advisories. Cisco has updated several of its existing advisories, providing new details on the impact of Node2Shell and an authorization bypass vulnerability affecting ISE and ISE-PIC. Furthermore, Cisco has added information regarding available fixes for seven critical and high-severity CVEs impacting its Meraki products.
Earlier this week, both Cisco and SonicWall announced the removal of compromised root certificates that were affected by issues with eMudhra intermediate certificates. This action was taken to mitigate potential trust-related security risks.
These updates from Asus and Zoom are part of a broader wave of security patching across the industry. Numerous other major technology vendors, including Apple, Fortinet, Citrix, Ivanti, Intel, AMD, Microsoft, Adobe, and SAP, along with multiple industrial control system (ICS) vendors, have also released a significant volume of security fixes this week, addressing a wide array of vulnerabilities.
The release of these patches underscores the ongoing efforts by technology providers to secure their products against evolving cyber threats. Users are strongly advised to apply these updates promptly to protect their systems from potential exploitation.