Asus, Zoom Release Security Patches
Asus and Zoom are among the tech companies that have released fresh security updates for their products this week.
Computer maker Asus published an advisory describing four high- and medium-severity vulnerabilities in certain router firmware releases.
Successful exploitation of the flaws could allow attackers to execute arbitrary commands with root privileges or overwrite memory and cause a crash.
Zoom has patched two vulnerabilities in Workplace for Windows, including a critical-severity unauthenticated privilege escalation bug tracked as CVE-2026-108186 (CVSS score of 9.6).
The second issue (CVE-2026-108187, CVSS score of 8.1) could also allow remote, unauthenticated attackers to elevate their privileges.
Zoom Workplace for Windows versions 7.1.8 and later contain patches for both bugs. Zoom makes no mention of any of these flaws being exploited in the wild.
Advertisement. Scroll to continue reading.
Additionally, Cisco updated several advisories: it added fresh information on Node2Shell’s impact and on an authorization bypass’s impact...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
