CVE-2026-122148High· 8.2▾ TwilightIn Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.
meetingboard_pro >= 331.320.0.30 < 331.320.0.64Yealink has remediated the aforementioned security vulnerability. Users can download the patched firmware via links for corresponding versions labeled "Patched" under the "Affected Products" section.
You can obtain the fixed software at the following URL:
Mitigation Measures (for devices not yet upgraded or unable to be upgraded promptly):Exploitation of this vulnerability requires valid administrator credentials. It is recommended to review the complexity of administrator passwords and potential credential leakage risks. Change passwords to strong, complex passwords in a timely manner.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-122120Critical· 9.0In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.
CVE-2026-122118High· 7.4In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used
CVE-2026-122116Medium· 4.3Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function
CVE-2026-122124Medium· 6.1On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface
CVE-2026-7208Medium· 5.3Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackers to interrupt active diagnostic processes by concurrently deleting output files written to predic…
CVE-2026-119746Medium· 5.9ProSoft ICX35 Login Lockout Bypass via Client-Side Cookies