YE
Vendor
Yealink
48
CVEs
1
On KEV
0
New 30D
Products
DM9.8
Device Management
Yealink
1 CVEs1 on KEV0 new
SI8.0
SIP-T46U
Yealink
6 CVEs0 on KEV0 new
SI–
Sip-t38g
Yealink
4 CVEs0 on KEV0 new
UI8.8
Ultra-elegant IP Phone Sip-t41p Firmware
Yealink
3 CVEs0 on KEV0 new
VF7.5
Vp59 Firmware
Yealink
3 CVEs0 on KEV0 new
YM9.8
Yealink Meeting Server
Yealink
3 CVEs0 on KEV0 new
CE9.8
Configuration Encryption Tool
Yealink
2 CVEs0 on KEV0 new
SF8.8
Sip-t21(p)e2 Firmware
Yealink
2 CVEs0 on KEV0 new
VP–
Voip Phone Firmware
Yealink
2 CVEs0 on KEV0 new
GC–
Gigabit Color IP Phone Sip-t32g
Yealink
1 CVEs0 on KEV0 new
GC–
Gigabit Color IP Phone Sip-t38g
Yealink
1 CVEs0 on KEV0 new
IP–
IP Phone Sip-t19p
Yealink
1 CVEs0 on KEV0 new
IP–
IP Phone Sip-t20p
Yealink
1 CVEs0 on KEV0 new
IP–
IP Phone Sip-t21p
Yealink
1 CVEs0 on KEV0 new
IP–
IP Phone Sip-t22p
Yealink
1 CVEs0 on KEV0 new
IP–
IP Phone Sip-t26p
Yealink
1 CVEs0 on KEV0 new
IP–
IP Phone Sip-t28p
Yealink
1 CVEs0 on KEV0 new
IV–
IP Video Phone Vp530
Yealink
1 CVEs0 on KEV0 new
MA4.3
MeetingBar A30
Yealink
1 CVEs0 on KEV0 new
RP7.4
RPS
Yealink
1 CVEs0 on KEV0 new
SF8.8
Sip-t19p-e2 Firmware
Yealink
1 CVEs0 on KEV0 new
SE3.5
SIP-T21P E2
Yealink
1 CVEs0 on KEV0 new
SF9.8
Sip-t28p Firmware
Yealink
1 CVEs0 on KEV0 new
SI5.3
SIP-T33G
Yealink
1 CVEs0 on KEV0 new
UI–
Ultra-elegant IP Phone Sip-t41p
Yealink
1 CVEs0 on KEV0 new
UI–
Ultra-elegant IP Phone Sip-t42g
Yealink
1 CVEs0 on KEV0 new
UI–
Ultra-elegant IP Phone Sip-t46g
Yealink
1 CVEs0 on KEV0 new
UI–
Ultra-elegant IP Phone Sip-t48g
Yealink
1 CVEs0 on KEV0 new
VP–
Voip Phone
Yealink
1 CVEs0 on KEV0 new
W5–
W52p
Yealink
1 CVEs0 on KEV0 new
WF9.1
W60b Firmware
Yealink
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-7208 | SI SIP-T33G Yealink | 5.3 | Sep 14 | Yealink SIP-T33G < 124.87.0.0 Race Condition via Diagnostic File Deletion |
| CVE-2026-12223 | SI SIP-T46U Yealink | 5.5 | Jun 15 | Yealink SIP-T46U Web FastCGI Service tftpuploadiperf mod_webd.TFTPUploadIperf command injection |
| CVE-2026-12222 | SI SIP-T46U Yealink | 8.0 | Jun 15 | Yealink SIP-T46U Web FastCGI Service bttest mod_webd.BlueToothTest stack-based overflow |
| CVE-2026-12221 | SI SIP-T46U Yealink | 8.0 | Jun 15 | Yealink SIP-T46U Firmware Chunk Upload upgrade sprintf stack-based overflow |
| CVE-2026-12220 | SI SIP-T46U Yealink | 8.0 | Jun 15 | Yealink SIP-T46U Firmware Chunk Upload handler accupgradebychunk mod_upgrade.SparePartsUpload stack-based overflow |
| CVE-2026-12219 | SI SIP-T46U Yealink | 6.3 | Jun 15 | Yealink SIP-T46U Web FastCGI Service start mod_diagnose.CommandShellByType command injection |
| CVE-2026-12218 | SI SIP-T46U Yealink | 8.0 | Jun 15 | Yealink SIP-T46U Web FastCGI Service beforewifitest StartReportInformation stack-based overflow |
| CVE-2026-1735 | MA MeetingBar A30 Yealink | 4.3 | Feb 2 | Yealink MeetingBar A30 Diagnostic command injection |
| CVE-2025-66737 | SF Sip-t21(p)e2 Firmware Yealink | 4.3 | Dec 26 | Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal |
| CVE-2025-66738 | SF Sip-t21(p)e2 Firmware Yealink | 8.8 | Dec 26 | An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic… |
| CVE-2025-68644 | RP RPS Yealink | 7.4 | Dec 21 | Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses |
| CVE-2025-14228 | SE SIP-T21P E2 Yealink | 3.5 | Dec 8 | Yealink SIP-T21P E2 Local Directory cross site scripting |
| CVE-2024-48353 | YM Yealink Meeting Server Yealink | 7.5 | Nov 1 | Yealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a front-end JS file and decrypt the plaintext passwords based on the obtained key… |
| CVE-2024-48352 | YM Yealink Meeting Server Yealink | 7.5 | Nov 1 | Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID |
| CVE-2024-33109 | SF Sip-t28p Firmware Yealink | 9.8 | Sep 19 | Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload… |
| CVE-2024-31747 | VF Vp59 Firmware Yealink | 2.1 | Apr 29 | An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 (fixed in 122.15.0.142) allows a physically proximate attacker to disable the phone lock via the Walkie Talkie… |
| CVE-2024-30939 | VF Vp59 Firmware Yealink | 6.8 | Apr 25 | An issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a physically proximate attacker to gain control of an account via a flaw in the factory… |
| CVE-2024-28442 | VF Vp59 Firmware Yealink | 7.5 | Mar 26 | Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use function in the company… |
| CVE-2024-24681 | CE Configuration Encryption Tool Yealink | 9.8 | Feb 23 | An issue was discovered in Yealink Configuration Encrypt Tool (AES version) and Yealink Configuration Encrypt Tool (RSA version before 1.2) |
| CVE-2022-48625 | CE Configuration Encryption Tool Yealink | 7.5 | Feb 20 | Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary |
| CVE-2024-24091 | YM Yealink Meeting Server Yealink | 9.8 | Feb 8 | Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file upload interface |
| CVE-2023-43959 | SF Sip-t19p-e2 Firmware Yealink | 8.8 | Oct 17 | An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component |
| CVE-2020-24113 | WF W60b Firmware Yealink | 9.1 | Aug 22 | Directory Traversal vulnerability in Contacts File Upload Interface in Yealink W60B version 77.83.0.85, allows attackers to gain sensitive information and cause a denial of… |
| CVE-2021-27561 In wildKEV | DM Device Management Yealink | 9.8 | Oct 15 | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability |
| CVE-2018-16221 | UI Ultra-elegant IP Phone Sip-t41p Firmware Yealink | 8.0 | May 29 | The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) does not validate (escape) the path information (path traversal), which allows… |
| CVE-2018-16218 | UI Ultra-elegant IP Phone Sip-t41p Firmware Yealink | 8.8 | May 29 | A CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware version 66.83.0.35 allows a remote attacker to trigger code… |
| CVE-2018-16217 | UI Ultra-elegant IP Phone Sip-t41p Firmware Yealink | 8.8 | May 29 | The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) allows a remote authenticated attacker to trigger OS commands or open… |
| CVE-2012-1417 | IV IP Video Phone Vp530 Yealink | – | Sep 17 | Multiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated users to inject arbitrary web script… |
| CVE-2013-5758 | SI Sip-t38g Yealink | – | Aug 3 | cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as… |
| CVE-2013-5757 | SI Sip-t38g Yealink | – | Aug 3 | Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the dumpConfigFile function… |
| CVE-2013-5756 | SI Sip-t38g Yealink | – | Aug 3 | Directory traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a |
| CVE-2014-3427 | VP Voip Phone Firmware Yealink | – | Jul 16 | CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks… |
| CVE-2013-5755 | SI Sip-t38g Yealink | – | Jul 16 | config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEiKQto) for the admin account, and (3)… |
| CVE-2014-3428 | VP Voip Phone Firmware Yealink | – | Jun 16 | Cross-site scripting (XSS) vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the model parameter to… |