Vulnerability · Published Nov 4, 2026 · Assigned by mitre
CVE-2026-122148
High 8.2
In plain English
A high-severity security flaw in MeetingBoard Pro from Yealink. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Official description
In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Yealink | MeetingBoard Pro | 331.320.0.30 – before 331.320.0.64 |
Weakness: CWE-602 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N