Vendor

    Yealink

    43 known vulnerabilities in products by Yealink, 1 of them actively exploited (CISA KEV).

    Key figures

    43

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Yealink
    CriticalCVE-2021-27561

    Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability

    In CISA KEV

    		9.8
    HighCVE-2018-16217

    Yealink Ultra-Elegant IP Phone SIP-T41P Firmware: Command Injection

    		8.8
    HighCVE-2023-43959

    Yealink Sip-t19p-e2 Firmware: Code Execution

    		8.8
    CriticalCVE-2024-24091

    Yealink Meeting Server: OS Command Injection

    		9.8
    CriticalCVE-2020-24113

    Yealink W60b Firmware: Path Traversal

    		9.1
    CriticalCVE-2024-24681

    Yealink Configuration Encryption Tool: Hard-coded Credentials

    		9.8
    HighCVE-2018-16221

    Yealink Ultra-Elegant IP Phone SIP-T41P Firmware: Path Traversal

    		8.0
    MediumCVE-2026-12219

    Yealink SIP-T46U Web FastCGI Service start mod_diagnose.CommandShellByType command injection

    		6.3
    MediumCVE-2026-12223

    Yealink SIP-T46U Web FastCGI Service tftpuploadiperf mod_webd.TFTPUploadIperf command injection

    		5.5
    CriticalCVE-2024-33109

    Ergophone Tiptel IP 286 Firmware: Path Traversal

    		9.9
    HighCVE-2018-16218

    Yealink Ultra-Elegant IP Phone SIP-T41P Firmware: Cross-Site Request Forgery (CSRF)

    		8.8
    MediumCVE-2026-1735

    Yealink MeetingBar A30 Diagnostic command injection

    		4.3
    HighCVE-2025-66738

    Yealink Sip-t21\(p\)e2 Firmware: Code Execution

    		8.8
    CriticalCVE-2026-122120

    Yealink Plug-in Softwares: Unrestricted Upload of File with Dangerous Type

    		9.0
    Not ratedCVE-2013-5758

    Yealink IP Phone SIP-T38G: security vulnerability

    		—
    HighCVE-2026-122148

    Yealink MeetingBoard Pro: Client-Side Enforcement of Server-Side Security

    		—
    HighCVE-2026-12222

    Yealink SIP-T46U Web FastCGI Service bttest mod_webd.BlueToothTest stack-based overflow

    		8.0
    HighCVE-2026-12221

    Yealink SIP-T46U Firmware Chunk Upload upgrade sprintf stack-based overflow

    		8.0
    HighCVE-2026-12218

    Yealink SIP-T46U Web FastCGI Service beforewifitest StartReportInformation stack-based overflow

    		8.0
    HighCVE-2026-12220

    Yealink SIP-T46U: Stack-based Buffer Overflow

    		8.0
    HighCVE-2024-28442

    Yealink Vp59 Firmware: Path Traversal

    		7.5
    Not ratedCVE-2014-3427

    Yealink VOIP phone firmware: CRLF Injection

    		—
    HighCVE-2026-122118

    Yealink AVHub: Small Space of Random Values

    		7.4
    Not ratedCVE-2013-5755

    Yealink IP Phone SIP-T38G: Hard-coded Credentials

    		—
    MediumCVE-2026-7208

    Yealink SIP-T33G < 124.87.0.0 Race Condition via Diagnostic File Deletion

    		5.3

    All vulnerabilities in search

    Products

    Products by Yealink
    Yealink SIP-T46U60
    Yealink RPS50
    Yealink IP Phone SIP-T38G40
    Vp59 Firmware30
    Yealink Meeting Server30
    Yealink Ultra-Elegant IP Phone SIP-T41P Firmware30