Bug 2567794 (CVE-2026-122116) - CVE-2026-122116 Yealink: Yealink: Information disclosure via improper access control in Wi-Fi 802.1X configuration
Summary: CVE-2026-122116 Yealink: Yealink: Information disclosure via improper access ...
Keywords:
Status: NEW
Alias: CVE-2026-122116
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-05 22:26 UTC by OSIDB Bzimport
Modified: 2026-11-06 01:26 UTC (History)
30 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-05 22:26:36 UTC 
Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.
Note You need to log in before you can comment on or make changes to this bug.