HIGH 7.4 NVD

CVE-2026-122118

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attacker

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic.

References

https://www.yealink.com/en/trust-center/security-bulletins/wifi-ap-weak-password-vulnerabi

Published: 2026-11-04 · Source: NVD · Feed updated: 2026-11-04

This high severity vulnerability with a CVSS score of 7.4 was published on 2026-11-04 via NVD.

vulnfeed aggregates 18258 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.