624/69 Thursday, November 12, 2026
ASUS and Zoom have released security updates to address vulnerabilities affecting their products. ASUS patched four vulnerabilities in Router Firmware versions 3.0.0.4.386, 3.0.0.4.388, and 3.0.0.6.102, including three High-severity flaws and one Medium-severity flaw that could result in memory corruption, service disruption, or command execution with Root privileges. Zoom, meanwhile, addressed CVE-2026-108186, a Critical vulnerability with a CVSS score of 9.6, and CVE-2026-108187, a High-severity vulnerability with a CVSS score of 8.1, in Zoom Workplace for Windows. Both Zoom vulnerabilities could lead to privilege escalation on affected systems. At the time of disclosure, neither vendor had reported confirmed exploitation of these vulnerabilities in the wild.
The ASUS vulnerabilities include CVE-2026-88707, an Out-of-bounds Write flaw that could allow an unauthenticated attacker on an adjacent network to send a specially crafted HTTP request, potentially causing memory corruption or a denial of service. CVE-2026-88708 is an Off-by-one error that may cause service disruption. CVE-2026-88709 is a Command Injection vulnerability that requires physical access to the device and a USB device containing a specially crafted directory name, potentially allowing command execution with Root privileges. CVE-2026-88710 could allow an unauthenticated attacker on an adjacent network to perform a multi-stage attack that ultimately results in command execution with Root privileges. Administrators should identify affected device models and update router firmware to the latest fixed versions.
For Zoom, CVE-2026-108186 is caused by improper input validation and affects Zoom Workplace for Windows versions 7.1.0 through versions prior to 7.1.8. CVE-2026-108187 is an Origin Validation issue affecting versions prior to 7.1.5. Both vulnerabilities could allow an unauthenticated attacker to escalate privileges under conditions that require some level of user interaction, as specified by the vendor. Users should therefore update Zoom Workplace for Windows to version 7.1.8 or later, which includes fixes for both vulnerabilities.
Source: https://www.securityweek.com/asus-zoom-release-security-patches/