Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2026-122120

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote co

Description

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Yealink Plug-in Softwares

Default version status: unaffected

  • 0 to < 2.35.219.0affected

References