Asus and Zoom patch router and Workplace privilege bugs
Original title: Asus, Zoom Release Security Patches
Zoom Workplace for Windows 7.1.8 fixes CVE-2026-108186 (CVSS 9.6) and CVE-2026-108187.
Asus published an advisory on four high- and medium-severity flaws in certain router firmware releases that could allow root command execution or a memory-overwrite crash. Zoom patched two unauthenticated privilege-escalation bugs in Workplace for Windows, including critical CVE-2026-108186. Versions 7.1.8 and later include both fixes. Zoom does not mention in-the-wild exploitation.
Unconfirmed: The report does not say whether the Asus or Zoom flaws are exploited.
- CVE-2026-108186 has a CVSS score of 9.6.
- CVE-2026-108187 has a CVSS score of 8.1.
- Asus did not publish CVE identifiers in the report.
- Cisco and SonicWall also issued related certificate and advisory updates this week.
Impact: root command execution or unauthenticated privilege escalation
| Product | Affected | Fixed in |
|---|---|---|
| Asus router firmware | certain router firmware releases | — |
| Zoom Workplace for Windows | — | 7.1.8 and later |
- 1.Update Zoom Workplace for Windows to 7.1.8 or later.
- 2.Apply the Asus router firmware updates described in its advisory.
- Products
- Workplace for Windows
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-108186+1 related CVE | Improper input validation privilege escalation in Zoom Workplace for Windows | 9.6 group max | — |
From the original article
1 min read at securityweek.com
Attackers could exploit them for command execution, memory overwrites, and privilege escalation. The post Asus, Zoom Release Security Patches appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.