Skip to content
OpenAdvisories
High · 7.4 CVE-2026-122118 EUVD-2026-117012GHSA-763v-w5mm-jf4f

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient stren…

Published Nov 4, 2026 · Updated Nov 4, 2026 · Assigned by mitre

Vendor: Yealink Product: AVHub Product: MeetingBar A10 Product: MeetingBar A40 Product: MeetingBar A50 Product: MeetingBorard C Product: SmartVision 80 Product: UVC40 E2 Product: UVC86

Description

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic.

Affected products

VendorProductAffectedFixed
Yealink AVHub < 153.135.0.76 153.135.0.76
Yealink UVC86 < 151.435.0.66 151.435.0.66
Yealink SmartVision 80 < 321.435.0.86 321.435.0.86
Yealink UVC40 E2 < 319.410.0.66 319.410.0.66
Yealink MeetingBorard C < 328.321.0.40 328.321.0.40
Yealink MeetingBar A10 < 278.320.0.86 278.320.0.86
Yealink MeetingBar A40 < 289.320.0.81 289.320.0.81
Yealink MeetingBar A50 < 323.320.0.54 323.320.0.54

References