CVE-2026-12220

creationtimestamp| type| source ---|---|--- 2026-06-15 07:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocpkfa5of2w 2026-06-15 08:09:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moctguavyj2e...

CVE-2026-12220 Yealink SIP-T46U Firmware Chunk Upload handler accupgradebychunk mod_upgrade.SparePartsUpload stack-based overflow

A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects the function modupgrade.SparePartsUpload of the file /api/upgrade/accupgradebychunk of the component Firmware Chunk Upload handler. Such manipulation of the argument uid leads to stack-based buffer overflow. The attack...