Asus and Zoom are among the tech companies that released new security updates for their products this week.
Computer manufacturer Asus has published an advisory describing four high and medium severity vulnerabilities in certain router firmware versions.
Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary commands with root privileges or overwrite memory and cause a crash.
Zoom fixed two vulnerabilities in Workplace for Windows, including a critical severity unauthenticated privilege escalation bug tracked as CVE-2026-108186 (CVSS score 9.6).
The second issue (CVE-2026-108187, CVSS score 8.1) could also allow unauthenticated, remote attackers to elevate their privileges.
Zoom Workplace for Windows versions 7.1.8 and later contain fixes for both bugs. Zoom makes no mention of exploiting these vulnerabilities in the wild.
In addition, Cisco updated several advisories: it added new information on the impact of Node2Shell and the impact of an authorization bypass on ISE and ISE-PIC, and added new details on the availability of fixes for seven critical and high severity CVEs in Meraki products.
Tuesday, Cisco and Sonic wall announced that it has removed root certificates affected by compromised eMudhra intermediate certificates.
The new security updates arrived among hundreds of patches from Apple, Fortinet, Citrix, Ivanti, Intel, AMD, Microsoft, Adobe, SAP and several ICS vendors.
Related: Threat actors exploit Openwave and Cisco BroadWorks vulnerabilities
Related: Barracuda vulnerabilities recently patched and exploited in attacks
Related: Anthropic rolls out Mythos 5.2 with improved bug hunting and fewer sandbox escapes
Related: IBM Aspera Faspex and SignalWire FreeSwitch vulnerabilities exploited in attacks
