CVE-2026-122120

In Yealink Plug-in Softwares versions prior to 2.35.219.0 , an unauthorized file write vulnerability exists under specific scenarios. This flaw is classified as CWE-434 (Unrestricted Upload of File with Dangerous Type) and can be exploited by attackers to achieve remote code execution . The vulne...