Skip to content
OpenAdvisories

Vendor

Yealink

19 known vulnerabilities.

Products

SIP-T46U 6 RPS 5 UVC40 E2 2 MeetingBar A40 1 MeetingBar A50 1 Plug-in Softwares 1 SIP-T33G 1 MeetingBoard Pro 1 MeetingBar A30 1 SIP-T21P E2 1 T3XW Series Phones 1 T4X Series Phones 1 T5X Series Phones 1 T7X Series Phones 1 SIP-T85W、SIP-T87W 1 AX83H、AX86R 1 CP925 1 CP935W 1 MP E2 Teams Series 1 VP59 Teams 1 SIP-T58W 1 VP59 1 CP965 1 AVHub 1 UVC86 1 SmartVision 80 1 MeetingBorard C 1 MeetingBar A10 1 SIP-T19P_E2 0 SIP-T23G 0 SIP-T40G 0 SIP-T40P 0 SIP-T27G 0 SIP-T41S 0 SIP-T42S 0 SIP-T46S 0 SIP- T48S 0 SIP-CP920 0 SIP-T53 0 SIP-T53W 0
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-122124

    On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credential…

    Yealink UVC40 E2
  • Medium 4.3
    CVE-2026-122116

    Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X…

    Yealink AX83H、AX86R CP935W T3XW Series Phones
  • Medium 5.3
    CVE-2026-7208

    Yealink SIP-T33G < 124.87.0.0 Race Condition via Diagnostic File Deletion

    Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackers to interrupt active diagnostic processes by concurrently deleting output files written to predictable paths under the …

    Yealink SIP-T33G
  • Medium 5.5
    CVE-2026-12223

    Yealink SIP-T46U Web FastCGI Service tftpuploadiperf mod_webd.TFTPUploadIperf command injection

    A vulnerability was identified in Yealink SIP-T46U 108.86.0.118. Affected by this vulnerability is the function mod_webd.TFTPUploadIperf of the file /api/inner/tftpuploadiperf of the component Web FastCGI Service. The manipulation of the argument ip/port lead…

    Yealink SIP-T46U
  • Medium 6.3
    CVE-2026-12219

    Yealink SIP-T46U Web FastCGI Service start mod_diagnose.CommandShellByType command injection

    A flaw has been found in Yealink SIP-T46U 108.86.0.118. The impacted element is the function mod_diagnose.CommandShellByType of the file /api/diagnosis/start of the component Web FastCGI Service. This manipulation of the argument Time causes command injection…

    Yealink SIP-T46U
  • Medium 4.3
    CVE-2026-1735

    Yealink MeetingBar A30 Diagnostic command injection

    A weakness has been identified in Yealink MeetingBar A30 133.321.0.3. This issue affects some unknown processing of the component Diagnostic Handler. This manipulation causes command injection. It is feasible to perform the attack on the physical device. The …

    Yealink MeetingBar A30
  • Medium 4.3
    CVE-2025-52919

    In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, poten…

    Yealink RPS
  • Medium 5.0
    CVE-2025-52918

    Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized acce…

    Yealink RPS
  • Medium 4.3
    CVE-2025-52917

    The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive re…

    Yealink RPS