RP
Product
RPS
5
CVEs
0
On KEV
7.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 1
Watch
Add RPS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-68644 | 7.4 | Dec 21 | Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses Affected: before 2025-06-27 |
| CVE-2025-52918 | 5.0 | Jun 21 | Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces Affected: before 2025-05-26 |
| CVE-2025-52917 | 4.3 | Jun 21 | The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests Affected: before 2025-05-26 |
| CVE-2025-52919 | 4.3 | Jun 21 | In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potentially allowing invalid certificates to be uploaded Affected: before 2025-05-26 |
| CVE-2025-52916 | 2.2 | Jun 21 | Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration (last five digits) Affected: before 2025-06-04 |
Showing 5