Asus and Zoom Issue Critical Security Patches

Asus and Zoom have released urgent security updates this week, addressing multiple vulnerabilities that could lead to significant compromise of affected systems.

Computer manufacturer Asus published an advisory detailing four high- and medium-severity vulnerabilities impacting certain router firmware releases. Successful exploitation of these flaws could allow attackers to execute arbitrary commands with root privileges or trigger memory overwrites, potentially causing system crashes.

Meanwhile, Zoom has patched two significant vulnerabilities in its Workplace for Windows application. The more critical of these, tracked as CVE-2026-108186, is a critical-severity unauthenticated privilege escalation bug with a CVSS score of 9.6. The second issue, CVE-2026-108187, rated 8.1 on the CVSS scale, also allows remote, unauthenticated attackers to elevate their privileges.

Zoom confirmed that Workplace for Windows versions 7.1.8 and later contain the necessary patches for both vulnerabilities. At the time of disclosure, Zoom stated there was no evidence of these flaws being exploited in the wild.

The patches from Asus and Zoom arrive amid a broader wave of security updates. Other technology vendors, including Apple, Fortinet, Citrix, Ivanti, Intel, AMD, Microsoft, Adobe, and SAP, have also released hundreds of patches this week. Separately, Cisco and SonicWall announced they had removed root certificates affected by compromised eMudhra intermediate certificates.

Users and organisations are strongly advised to apply the latest security updates from Asus and Zoom without delay to mitigate potential risks.