Improper Access Control in Yealink Terminal Devices

CVE-2026-122116

What is CVE-2026-122116?

Certain Yealink terminal devices possess a vulnerability in the Wi-Fi 802.1X PEAP network configuration function, which allows unauthorized users to access and exploit network access authentication credentials. This issue arises from inadequate restrictions on configuration modification, potentially allowing intruders to manipulate sensitive settings. The vulnerability has been mitigated in the latest firmware release, which ensures that only administrator accounts can modify the 802.1X configuration by default.

References