← CVE Radar
CVE-2026-122118
In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic.
7.4 HIGHEPSS 0.20%Not in KEVNVD: Received
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.4 | HIGH | 3.1mitre (CNA) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
Details
- CVE ID
- CVE-2026-122118
- Status
- Received
- Assigner (CNA)
- mitre
- Published
- Nov 4, 2026
- Last modified
- 2026-11-04 20:19 UTC
- Weaknesses
- CWE-334 · Small Space of Random Values
Affected Products
As published by the CNA in the CVE record.
YealinkAVHub1 version range
- before 153.135.0.76
YealinkUVC861 version range
- before 151.435.0.66
YealinkSmartVision 801 version range
- before 321.435.0.86
YealinkUVC40 E21 version range
- before 319.410.0.66
YealinkMeetingBorard C1 version range
- before 328.321.0.40
YealinkMeetingBar A101 version range
- before 278.320.0.86
YealinkMeetingBar A401 version range
- before 289.320.0.81
YealinkMeetingBar A501 version range
- before 323.320.0.54