All security reports
NVD security advisoryCritical

Critical advisory for In Yealink Plug-in Softwares

CVE-2026-122120 · Reported 4 Nov 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

In Yealink Plug-in SoftwaresAffected product

Advisory overview

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specif | Security report | Cevnitra