Skip to content

CVE record · 1 source

CVE-2026-122120

CVSS 9.0

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by…

Vendor: Yealink
Product: Plug-in Softwares
CVSS v3.1: 9.0 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS: 0.005 (p44)
Weakness: CWE-434
Exposure class: Collaboration

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

54

CVE NVD 28h ago

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by…

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.

Exploited CVSS 9.0 CVE-2026-122120 Yealink