Asus and Zoom release patches for security flaws

SecurityWeek reports that Asus and Zoom have released security patches this week. Asus issued an advisory describing four high- and medium-severity flaws found in certain router firmware releases; attackers could exploit the weaknesses to execute arbitrary commands with root privileges or to overwrite memory and crash devices, SecurityWeek notes.

Zoom released updates for Zoom Workplace for Windows, addressing two vulnerabilities. The first is CVE-2026-108186, a critical-severity unauthenticated privilege-escalation bug with a CVSS score of 9.6. The second, CVE-2026-108187 (score 8.1), could also allow remote, unauthenticated attackers to elevate their privileges. Zoom Workplace for Windows versions 7.1.8 and later receive patches for both issues, and Zoom states that none of these flaws have been exploited in the wild.

SecurityWeek’s coverage also references Cisco and SonicWall updates and broader patch activity across multiple vendors, but the Asus and Zoom advisories are the core focus of the current report. The piece attributes the vulnerability details to Asus’s advisory and Zoom’s security bulletin, with additional context about subsequent vendor updates.