plug-in_softwares vulnerabilities

CVEs whose affected-version data names the plug-in_softwares package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-122120Critical· 9.0

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.

▾ MidnightYealink · Plug-in SoftwaresEPSS 0.51%via CVEORG

plug-in_softwares vulnerabilities (CVEs) · VulnSea