Two more items from this week’s patch pile, from The Hacker News and SecurityWeek:
Zoom Workplace for Windows
- CVE-2026-108186 (CVSS 9.6): improper input validation that lets an unauthenticated user escalate privileges over the network. It affects 7.1.0 up to, but not including, 7.1.8.
- CVE-2026-108187 (CVSS 8.1): an origin validation flaw with the same kind of result. It affects versions before 7.1.5.
Version 7.1.8 and later fix both. Zoom hasn’t mentioned any exploitation. It’s the second critical Zoom Workplace for Windows bug since July.
Asus routers
Asus published an advisory for four high- and medium-severity flaws in some router firmware. They could let an attacker run commands as root or crash the device.
My take
Open Zoom and check for updates. If you manage it for family or a small office, push 7.1.8. For the Asus box, go log in and update the firmware, because routers don’t patch themselves as often as people think.
God Bless, and Happy hacking!
