Dashboard / CVE-2026-122116

CVE-2026-122116

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 59/100
Published: 2026-11-04 Modified: 2026-11-12 First seen: 2026-11-04 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: Low

Description

Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.

Weakness Classification (1)

Affected Software (26)

VendorProductVersion
Yealink AX83H、AX86R 180.86.0.1 < 180.87.0.15
Yealink AX83H、AX86R 180.86.0.1 < 180.87.0.15
Yealink CP925 148.85.0.1 < 148.87.0.41
Yealink CP925 148.85.0.1 < 148.87.0.41
Yealink CP935W 149.85.0.1 < 149.87.0.41
Yealink CP935W 149.85.0.1 < 149.87.0.41
Yealink CP965 143.86.0.5 < 143.87.0.27
Yealink CP965 143.86.0.5 < 143.87.0.27
Yealink MP E2 Teams Series 176.15.0.1 < 176.15.0.191
Yealink MP E2 Teams Series 176.15.0.1 < 176.15.0.191
Yealink SIP-T58W 150.86.0.5 < 150.87.0.22
Yealink SIP-T58W 150.86.0.5 < 150.87.0.22
Yealink SIP-T85W、SIP-T87W 185.87.0.5 < 185.87.0.39
Yealink SIP-T85W、SIP-T87W 185.87.0.5 < 185.87.0.39
Yealink T3XW Series Phones 124.85.0.1 < 124.87.0.22
Yealink T3XW Series Phones 124.85.0.1 < 124.87.0.22
Yealink T4X Series Phones 108.85.0.1 < 108.87.0.23
Yealink T4X Series Phones 108.85.0.1 < 108.87.0.23
Yealink T5X Series Phones 96.85.0.1 < 96.87.0.24
Yealink T5X Series Phones 96.85.0.1 < 96.87.0.24
Yealink T7X Series Phones 185.87.0.5 < 185.87.0.39
Yealink T7X Series Phones 185.87.0.5 < 185.87.0.39
Yealink VP59 91.86.0.5 < 91.87.0.27
Yealink VP59 91.86.0.5 < 91.87.0.27
Yealink VP59 Teams 91.15.0.1 < 91.15.1.37
Yealink VP59 Teams 91.15.0.1 < 91.15.1.37

References & Advisories (1)

Bug Bounty Relevance

59 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

4.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS — Exploitation Probability

0.31%
Raw Score 0.003120
Percentile 24.4%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00312
2026-11-12
0.00312
2026-11-10
0.00312
2026-11-09
0.00312
2026-11-08
0.00312
2026-11-07
0.00312
2026-11-06
0.00312
2026-11-05
0.00312

Intelligence Sources

mitre ref →
nvd ref →

External Links