Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-122116

Quick assessment

Affected
Yealink T3XW Series Phones
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

2026 年 4 月 21 日之前的部分 Yealink 终端设备在 Wi-Fi 802.1X PEAP 网络配置功能中存在访问控制不当的漏洞。该缺陷会导致已部署的 802.1X 网络接入认证凭证被未授权用户获取。Yealink 最新固件已通过默认将 802.1X 配置修改权限限制为仅限管理员账户，修复了此漏洞。

CVSS 4.3 · Medium

Affected Version Matrix 13

VendorProduct Version RangeStatus
Yealink AX83H、AX86R 180.86.0.1< 180.87.0.15 affected
Yealink CP925 148.85.0.1< 148.87.0.41 affected
Yealink CP935W 149.85.0.1< 149.87.0.41 affected
Yealink CP965 143.86.0.5< 143.87.0.27 affected
Yealink MP E2 Teams Series 176.15.0.1< 176.15.0.191 affected
Yealink SIP-T58W 150.86.0.5< 150.87.0.22 affected
Yealink SIP-T85W、SIP-T87W 185.87.0.5< 185.87.0.39 affected
Yealink T3XW Series Phones 124.85.0.1< 124.87.0.22 affected
Yealink T4X Series Phones 108.85.0.1< 108.87.0.23 affected
Yealink T5X Series Phones 96.85.0.1< 96.87.0.24 affected
Yealink T7X Series Phones 185.87.0.5< 185.87.0.39 affected
Yealink VP59 91.86.0.5< 91.87.0.27 affected
Yealink VP59 Teams 91.15.0.1< 91.15.1.37 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-122116

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Yealink T3XW Series Phones 124.85.0.1 ~ 124.87.0.22 -
Yealink T4X Series Phones 108.85.0.1 ~ 108.87.0.23 -
Yealink T5X Series Phones 96.85.0.1 ~ 96.87.0.24 -
Yealink T7X Series Phones 185.87.0.5 ~ 185.87.0.39 -
Yealink SIP-T85W、SIP-T87W 185.87.0.5 ~ 185.87.0.39 -
Yealink AX83H、AX86R 180.86.0.1 ~ 180.87.0.15 -
Yealink CP925 148.85.0.1 ~ 148.87.0.41 -
Yealink CP935W 149.85.0.1 ~ 149.87.0.41 -
Yealink MP E2 Teams Series 176.15.0.1 ~ 176.15.0.191 -
Yealink VP59 Teams 91.15.0.1 ~ 91.15.1.37 -
Yealink SIP-T58W 150.86.0.5 ~ 150.87.0.22 -
Yealink VP59 91.86.0.5 ~ 91.87.0.27 -
Yealink CP965 143.86.0.5 ~ 143.87.0.27 -

II. Public POCs for CVE-2026-122116

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-122116

请登录查看更多情报信息。

Other References for CVE-2026-122116 (1)

Same Patch Batch · Yealink · 2026-11-04 · 5 CVEs total

CVE-2026-122120 9.0 CRITICAL Yealink插件软件2.35.219.0前未授权文件写入漏洞
CVE-2026-122148 8.2 HIGH Yealink MeetingBoard Pro 前端验证绕过漏洞
CVE-2026-122118 7.4 HIGH Yealink 产品弱密码漏洞：WPA2 默认 PSK 可被暴力破解
CVE-2026-122124 6.1 MEDIUM Yealink UVC40 E2 固件越权与窃听漏洞

IV. Related Vulnerabilities

Same vendor: Yealink
Same weakness: CWE-863