CVE-2026-12218 Yealink SIP-T46U Web FastCGI Service beforewifitest StartReportInformation stack-based overflow

A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file /api/inner/beforewifitest of the component Web FastCGI Service. The manipulation of the argument port results in stack-based buffer overflow. Access to the local...

EUVD-2026-36691

A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file /api/inner/beforewifitest of the component Web FastCGI Service. The manipulation of the argument port results in stack-based buffer overflow. Access to the local...

CVE-2026-12218

The CVE-2026-12218 entry concerns Yealink SIP-T46U (firmware version 108.87.50.1) with a vulnerability in Web FastCGI Service, affecting the function StartReportInformation in /api/inner/beforewifitest. The issue is triggered by manipulating the port argument, causing a stack-based buffer overflo...