Asus, Zoom Release Security Patches
Asus and Zoom release security patches for router firmware and Windows client.
Asus has released an advisory for four high- and medium-severity vulnerabilities in its router firmware, which could allow command execution or memory overwrites. Zoom has patched two vulnerabilities in Workplace for Windows, including a critical-severity unauthenticated privilege escalation bug (CVE-2026-108186) and another privilege escalation flaw (CVE-2026-108187). Cisco also updated advisories for Node2Shell and an authorization bypass on ISE, and provided details on fixes for seven CVEs in Meraki products. Neither Asus nor Zoom have indicated exploitation in the wild.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Cisco?
Get an email when a new story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAsus, Zoom, and Cisco have all released patches addressing high- and critical-severity vulnerabilities, including an unauthenticated privilege escalation flaw in Zoom for Windows that requires no credentials to exploit. Router firmware vulnerabilities in Asus products could allow attackers to execute arbitrary commands or overwrite memory, posing serious risks to network infrastructure. While no active exploitation has been reported, unpatched systems remain exposed windows of opportunity for threat actors. Organizations that delay applying vendor patches — especially for internet-facing devices and widely used collaboration tools — dramatically increase their attack surface.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-108186
- cve — CVE-2026-108187