Front-end Validation Bypass in Yealink MeetingBoard Pro Web Management Module

CVE-2026-122148

What is CVE-2026-122148?

The Yealink MeetingBoard Pro prior to version 331.320.0.64 is affected by a vulnerability in its web management module. This vulnerability allows attackers with administrator privileges to exploit front-end validation bypass. By modifying the Document Object Model (DOM) of the webpage, an attacker can circumvent critical UI control logic and invoke sensitive screenshot functions, ultimately compromising the security of the system. The exploitation is feasible only if the attacker possesses a valid administrator account within the local network, which raises concerns about internal security protocols and account management.

References