All 6 CVE vulnerabilities found in SIP-T46U, with AI-generated Chinese analysis, references, and POCs.
Vendor: Yealink
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-12223 | Yealink SIP-T46U Web FastCGI Service tftpuploadiperf mod_webd.TFTPUploadIperf command injection CWE-77 | 5.5 | Medium | 2026-06-15 |
| CVE-2026-12222 | Yealink SIP-T46U Web FastCGI Service bttest mod_webd.BlueToothTest stack-based overflow CWE-121 | 8.0 | High | 2026-06-15 |
| CVE-2026-12221 | Yealink SIP-T46U Firmware Chunk Upload upgrade sprintf stack-based overflow CWE-121 | 8.0 | High | 2026-06-15 |
| CVE-2026-12220 | Yealink SIP-T46U Firmware Chunk Upload handler accupgradebychunk mod_upgrade.SparePartsUpload stack-based overflow CWE-121 | 8.0 | High | 2026-06-15 |
| CVE-2026-12219 | Yealink SIP-T46U Web FastCGI Service start mod_diagnose.CommandShellByType command injection CWE-77 | 6.3 | Medium | 2026-06-15 |
| CVE-2026-12218 | Yealink SIP-T46U Web FastCGI Service beforewifitest StartReportInformation stack-based overflow CWE-121 | 8.0 | High | 2026-06-15 |
All 6 known CVE vulnerabilities affecting SIP-T46U with full Chinese analysis, references, and POCs where available.