CVE-2026-122116
Medium
Description
Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.
SeverityMedium
CVSS4.3
Exploit probability—
ProductT3XW Series Phones
PublishedNov 4, 2026
First seenNov 4, 2026
Weakness typeCWE-863Incorrect authorization
How to fix
Update
- Yealink T3XW Series Phones124.87.0.22 or later
- Yealink T4X Series Phones108.87.0.23 or later
- Yealink T5X Series Phones96.87.0.24 or later
- Yealink T7X Series Phones185.87.0.39 or later
- Yealink SIP-T85W、SIP-T87W185.87.0.39 or later
- Yealink AX83H、AX86R180.87.0.15 or later
- Yealink CP925148.87.0.41 or later
- Yealink CP935W149.87.0.41 or later
- Yealink MP E2 Teams Series176.15.0.191 or later
- Yealink VP59 Teams91.15.1.37 or later
- Yealink SIP-T58W150.87.0.22 or later
- Yealink VP5991.87.0.27 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Yealink T3XW Series Phones | 124.85.0.1 ≤ v < 124.87.0.22 | 124.87.0.22 |
| Yealink T4X Series Phones | 108.85.0.1 ≤ v < 108.87.0.23 | 108.87.0.23 |
| Yealink T5X Series Phones | 96.85.0.1 ≤ v < 96.87.0.24 | 96.87.0.24 |
| Yealink T7X Series Phones | 185.87.0.5 ≤ v < 185.87.0.39 | 185.87.0.39 |
| Yealink SIP-T85W、SIP-T87W | 185.87.0.5 ≤ v < 185.87.0.39 | 185.87.0.39 |
| Yealink AX83H、AX86R | 180.86.0.1 ≤ v < 180.87.0.15 | 180.87.0.15 |
| Yealink CP925 | 148.85.0.1 ≤ v < 148.87.0.41 | 148.87.0.41 |
| Yealink CP935W | 149.85.0.1 ≤ v < 149.87.0.41 | 149.87.0.41 |
| Yealink MP E2 Teams Series | 176.15.0.1 ≤ v < 176.15.0.191 | 176.15.0.191 |
| Yealink VP59 Teams | 91.15.0.1 ≤ v < 91.15.1.37 | 91.15.1.37 |
| Yealink SIP-T58W | 150.86.0.5 ≤ v < 150.87.0.22 | 150.87.0.22 |
| Yealink VP59 | 91.86.0.5 ≤ v < 91.87.0.27 | 91.87.0.27 |
| Yealink CP965 | 143.86.0.5 ≤ v < 143.87.0.27 | 143.87.0.27 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.