Yealink
Vulnerability activity for Yealink: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 5
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 6
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 8
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
Recent
- 8.2HighNov 4, 2026Yealink MeetingBoard ProCVE-2026-122148In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.
- 6.1MediumNov 4, 2026Yealink UVC40 E2CVE-2026-122124On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface. Sensitive data within the firmware configuration can be abused to gain root privileges on the device. Within Wi‑Fi coverage, the attacker may perform audio and video eavesdropping with no LED alert from the device.
- 9.0CriticalNov 4, 2026Yealink Plug-in Softwares Path traversal / file handlingCVE-2026-122120In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.
- 7.4HighNov 4, 2026Yealink AVHubCVE-2026-122118In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic.
- 4.3MediumNov 4, 2026Yealink T3XW Series Phones Auth bypass / access controlCVE-2026-122116Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.
- 5.3MediumSep 14, 2026Yealink SIP-T33GCVE-2026-7208Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackers to interrupt active diagnostic processes by concurrently deleting output files written to predictable paths under the diagnostic directory. Attackers can trigger a diagnostic operation such as traceroute or ping and simultaneously invoke the file deletion endpoint to terminate the running process, leaving the system in an inconsistent state.
- 4.3MediumDec 26, 2025Yealink sip-t21\(p\)e2 firmware Path traversal / file handlingCVE-2025-66737Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component.
- 8.8HighDec 26, 2025Yealink sip-t21\(p\)e2 firmware Code / command injectionCVE-2025-66738An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component.
- 9.8CriticalOct 15, 2021Yealink Device Management Code / command injectionCVE-2021-27561Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution.Exploited83% likelyExploit codeNucleiDetection
Top products
- sip-t21\(p\)e2 firmware2 CVEs in the last year
- UVC40 E21 CVE in the last year
- T3XW Series Phones1 CVE in the last year
- SIP-T33G1 CVE in the last year
- Plug-in Softwares1 CVE in the last year, 1 critical
- MeetingBoard Pro1 CVE in the last year
- AVHub1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.