CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LCVE-2026-122116
Medium (4.3).
Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.
Severity
- CISA's assessment (SSVC)
- Exploitation: none · Automatable: no · Technical impact: partial, assessed 2026-11-04. From CISA's Vulnrichment in the CVE List: whether it is exploited, whether exploiting it can be automated, and how much control it gives.
- CWE
- CWE-863 Incorrect Authorization
- OWASP Top 10
- A01:2025 Broken Access Control
- Published
- Modified
- Record from
- the NVD, synced
Ask an AI about this CVE
Show the prompt
Explain CVE-2026-122116 for an engineer deciding whether to act. Use https://cve.bz/api/public/cves/CVE-2026-122116?via=ask-ai-copy and https://cve.bz/cve/CVE-2026-122116?via=ask-ai-copy as the source of truth: what is affected and which versions fix it, whether it is in CISA KEV, public exploits, and its EPSS (an internet-wide 30-day estimate of exploitation activity, not a forecast for my systems). If they give no fixed versions, use the CVE record https://cveawg.mitre.org/api/cve/CVE-2026-122116 or the vendor advisory, not third-party mirrors. Tell me how to check whether I am affected and how to verify a fix. Cite the sources and say where they are uncertain.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this CVE's id and public links.
Versions
From the CNA's record in the CVE List.
| Product | Affected |
|---|---|
| Yealink T3XW Series Phones | from 124.85.0.1 before 124.87.0.22 |
| Yealink T4X Series Phones | from 108.85.0.1 before 108.87.0.23 |
| Yealink T5X Series Phones | from 96.85.0.1 before 96.87.0.24 |
| Yealink T7X Series Phones | from 185.87.0.5 before 185.87.0.39 |
| Yealink SIP-T85W、SIP-T87W | from 185.87.0.5 before 185.87.0.39 |
| Yealink AX83H、AX86R | from 180.86.0.1 before 180.87.0.15 |
| Yealink CP925 | from 148.85.0.1 before 148.87.0.41 |
| Yealink CP935W | from 149.85.0.1 before 149.87.0.41 |
| Yealink MP E2 Teams Series | from 176.15.0.1 before 176.15.0.191 |
| Yealink VP59 Teams | from 91.15.0.1 before 91.15.1.37 |
| Yealink SIP-T58W | from 150.86.0.5 before 150.87.0.22 |
| Yealink VP59 | from 91.86.0.5 before 91.87.0.27 |
| Yealink CP965 | from 143.86.0.5 before 143.87.0.27 |