Vulnerability · Published Nov 4, 2026 · Assigned by mitre
CVE-2026-122116
Medium 4.3
In plain English
A medium-severity incorrect authorization in AX83H、AX86R from Yealink. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Official description
Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Yealink | T3XW Series Phones | 124.85.0.1 – before 124.87.0.22 |
| Yealink | T4X Series Phones | 108.85.0.1 – before 108.87.0.23 |
| Yealink | T5X Series Phones | 96.85.0.1 – before 96.87.0.24 |
| Yealink | T7X Series Phones | 185.87.0.5 – before 185.87.0.39 |
| Yealink | SIP-T85W、SIP-T87W | 185.87.0.5 – before 185.87.0.39 |
| Yealink | AX83H、AX86R | 180.86.0.1 – before 180.87.0.15 |
| Yealink | CP925 | 148.85.0.1 – before 148.87.0.41 |
| Yealink | CP935W | 149.85.0.1 – before 149.87.0.41 |
| Yealink | MP E2 Teams Series | 176.15.0.1 – before 176.15.0.191 |
| Yealink | VP59 Teams | 91.15.0.1 – before 91.15.1.37 |
| Yealink | SIP-T58W | 150.86.0.5 – before 150.87.0.22 |
| Yealink | VP59 | 91.86.0.5 – before 91.87.0.27 |
| Yealink | CP965 | 143.86.0.5 – before 143.87.0.27 |
Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L