Skip to content
OpenAdvisories
High · 8.2 CVE-2026-122148 EUVD-2026-117018GHSA-rvhh-fqwv-r6fq

In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker wit…

Published Nov 4, 2026 · Updated Nov 5, 2026 · Assigned by mitre

Description

In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.

Affected products

VendorProductAffectedFixed
Yealink MeetingBoard Pro 331.320.0.30 – < 331.320.0.64 331.320.0.64

References