PT-2026-137090

CVE-2026-122120

·

Published

2026-11-04

·

Updated

2026-11-04

Description by

CVSS 3.1
9.0
Critical
MetricsAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Yealink Plug-in Softwares versions prior to 2.35.219.0
Description An unauthorized file write issue exists in the plug-in component. Remote attackers can write files over the network without authentication, which may lead to remote code execution on the system.
Recommendations Update Yealink Plug-in Softwares to version 2.35.219.0.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-434: Unrestricted Upload of File with Dangerous Type
Related identifiers
CVE-2026-122120
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com