CVE Watch4 de nov. de 2026

CVE-2026-122116

Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configu

CVSS

4.3

Média

EPSS

0.3%

p24

KEV

—

Exploit Today

0-100

Publicado: 4 de nov. de 2026 · Última mod.: 4 de nov. de 2026 · CWE-863

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.

Referências oficiais

www.yealink.comhttps://www.yealink.com/en/trust-center/security-bulletins/wifi-8021x-peap-authentication-credential-leakage-vulnerability

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1233343.8 BAI

—

———In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project8h CVE-2026-1233333.8 BAI

—

———In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints8h CVE-2026-1233286.4 MÉD

—

———In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab8h CVE-2026-1233267.1 ALT

—

———In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension8h CVE-2026-1233247.7 ALT

—

———In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible8h CVE-2026-1232993.1 BAI

—

———In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible8h