CVE-2026-108186

Asus, Zoom, and Cisco Release Security Patches for Router and Windows Vulnerabilities

Asus published an advisory covering four high- and medium-severity vulnerabilities in certain router firmware releases that could allow attackers to execute arbitrary commands with root privileges or overwrite memory and cause a crash. Zoom addressed two vulnerabilities in Workplace for Windows, including a critical unauthenticated privilege escalation flaw tracked as CVE-2026-108186 with a CVSS score of 9.6 and a second issue CVE-2026-108187 scoring 8.1 that also permits remote unauthenticated privilege escalation. Both flaws are fixed in Zoom Workplace for Windows versions 7.1.8 and later, with no indication of in-the-wild exploitation. Cisco updated multiple advisories with new details on Node2Shell impact, an authorization bypass affecting ISE and ISE-PIC, and the availability of fixes for seven critical- and high-severity CVEs in Meraki products. On Tuesday, both Cisco and SonicWall removed root certificates impacted by compromised eMudhra intermediate certificates. The updates arrived alongside hundreds of patches from Apple, Fortinet, Citrix, Ivanti, Intel, AMD, Microsoft, Adobe, SAP, and multiple ICS vendors.