Yealink vulnerabilities
Every vulnerability this feed holds for Yealink, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
5 vulnerabilities tracked.
- 9.0 In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be…
- 8.2 In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability.
- 7.4 In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient…
- 6.1 On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB…
- 4.3 Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Yealink is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Google Microsoft Apple Red Hat zephyrproject Apache Software Foundation n/a Hewlett Packard Enterprise (HPE) MediaTek, Inc. Linux Tanium Eclipse Foundation Unknown FreeRDP Dell IBM Oracle Corporation MONGODB Gitea WAVLINK Hitachi vim vercel jpadilla