CVE-2026-122116

Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.

4.3 MEDIUMEPSS 0.31%Not in KEVNVD: Received

Last updated: 2026-11-04 20:19 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
4.3	MEDIUM	3.1mitre (CNA)	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Details

CVE ID: CVE-2026-122116
Status: Received
Assigner (CNA): mitre
Published: Nov 4, 2026
Last modified: 2026-11-04 20:19 UTC
Weaknesses: CWE-863 · Incorrect Authorization

Sources

NVD
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-08 10:29 UTC.