Asus and Zoom are among the tech companies that have released fresh security updates for their products this week.
Computer maker Asus published an advisory describing four high- and medium-severity vulnerabilities in certain router firmware releases.
Successful exploitation of the flaws could allow attackers to execute arbitrary commands with root privileges or overwrite memory and cause a crash.
Zoom has patched two vulnerabilities in Workplace for Windows, including a critical-severity unauthenticated privilege escalation bug tracked as CVE-2026-108186 (CVSS score of 9.6).
The second issue (CVE-2026-108187, CVSS score of 8.1) could also allow remote, unauthenticated attackers to elevate their privileges.
Zoom Workplace for Windows versions 7.1.8 and later contain patches for both bugs. Zoom makes no mention of any of these flaws being exploited in the wild.
Additionally, Cisco updated several advisories: it added fresh information on Node2Shell ’s impact and on an authorization bypass’s impact on ISE and ISE-PIC, and added new details on the availability of fixes for seven critical- and high-severity CVEs in Meraki products.
On Tuesday, both Cisco and SonicWall announced they have removed root certificates affected by compromised eMudhra intermediate certificates .
The fresh security updates arrived among hundreds of patches from Apple , Fortinet , Citrix, Ivanti , Intel, AMD , Microsoft , Adobe , SAP , and multiple ICS vendors .
Related: Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities
Related: Recently Patched Barracuda Vulnerabilities Exploited in Attacks
Related: Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes
Related: IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks
Ionut Arghire is an international correspondent for SecurityWeek.
More from Ionut Arghire
Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities
Recently Patched Barracuda Vulnerabilities Exploited in Attacks
WhiteMatter Raises $20 Million in Series A Funding
SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities
Over a Dozen Organizations Hit in Qubole Supply Chain Attack
N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days
IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks
Plex2Shell Exploited Against QNAP NAS Users
Today: CISO Forum Virtual Summit 2026 Day 2 – Join Cybersecurity Leaders Online
Critical Xen Orchestra Flaws Exploited in Attacks
Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities
Finite State Raises $27 Million to Secure Software and Firmware in Connected Devices
Fortinet Patches Nearly 100 Vulnerabilities
Bay Raises $50 Million to Control What Enterprise AI Agents Can Do
Dreeze Emerges From Stealth With $33M to Rebuild Cloud Apps After Cyberattacks
ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure
NOW LIVE: CISO Forum 2026 Summit
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to practical experience and examine the issues shaping enterprise cybersecurity strategy.
Webinar: The Agentic SDLC Security Playbook
Join to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
Flipboard Whatsapp Whatsapp Email
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
