Asus and Zoom are among the tech companies that have released fresh security updates for their products this week.
Computer maker Asus published an advisory describing four high- and medium-severity vulnerabilities in certain router firmware releases.
Successful exploitation of the flaws could allow attackers to execute arbitrary commands with root privileges or overwrite memory and cause a crash.
Zoom has patched two vulnerabilities in Workplace for Windows, including a critical-severity unauthenticated privilege escalation bug tracked as CVE-2026-108186 (CVSS score of 9.6).
The second issue (CVE-2026-108187, CVSS score of 8.1) could also allow remote, unauthenticated attackers to elevate their privileges.
Zoom Workplace for Windows versions 7.1.8 and later contain patches for both bugs. Zoom makes no mention of any of these flaws being exploited in the wild.
Additionally, Cisco updated several advisories: it added fresh information on Node2Shell’s impact and on an authorization bypass’s impact on ISE and ISE-PIC, and added new details on the availability of fixes for seven critical- and high-severity CVEs in Meraki products.
On Tuesday, both Cisco and SonicWall announced they have removed root certificates affected by compromised eMudhra intermediate certificates.
The fresh security updates arrived among hundreds of patches from Apple, Fortinet, Citrix, Ivanti, Intel, AMD, Microsoft, Adobe, SAP, and multiple ICS vendors.
Related: Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities
Related: Recently Patched Barracuda Vulnerabilities Exploited in Attacks
Related: Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes
Related: IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks
