Asus, Zoom, Cisco, and SonicWall are among the tech companies that have released new security updates for their products. Computer manufacturer Asus notably issued a security advisory describing four high and medium severity vulnerabilities in certain versions of its routers’ firmware.
According to this advisory, successful exploitation of these flaws could allow attackers to execute arbitrary commands with root privileges, meaning the highest administrator rights on a system. It could also allow memory overwriting and cause a crash.
Zoom Patches Two Flaws in Workplace for Windows
Zoom has patched two vulnerabilities in its Workplace application for Windows. The most severe, identified as CVE-2026-108186, is an unauthenticated privilege escalation flaw, rated as critical severity, with a CVSS score of 9.6. CVSS is a standard scale that measures the severity of a vulnerability.
The second, referenced as CVE-2026-108187 and displaying a CVSS score of 8.1, could also allow remote, unauthenticated attackers to elevate their privileges. Versions 7.1.8 and later of Zoom Workplace for Windows contain the patches for these two flaws. Zoom does not mention exploitation of any of these vulnerabilities in the wild.
Cisco, SonicWall, and a Series of Patches
Cisco has updated several of its security advisories. The company added information on the impact of the Node2Shell vulnerability, as well as on that of an authorization bypass affecting ISE and ISE-PIC products. It also clarified the availability of patches for seven critical and high severity flaws affecting Meraki products.
Cisco and SonicWall also announced they have revoked root certificates affected by compromised eMudhra intermediate certificates.
These updates add to hundreds of patches released by Apple, Fortinet, Citrix, Ivanti, Intel, AMD, Microsoft, Adobe, SAP, and several industrial control system (ICS) vendors.
