CVE-2024-24091

Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file upload interface...

Yealink Meeting Server Security Vulnerability

Yealink YeaLink Meeting Server is a distributed cloud video conferencing infrastructure from China Yealink Yealink. A security vulnerability exists in Yealink Meeting Server versions prior to v26.0.0.66. An attacker can exploit this vulnerability to perform an operating system command injection...

PT-2024-20263 · Yealink · Yealink Meeting Server

Name of the Vulnerable Software and Affected Versions: Yealink Meeting Server versions prior to 26.0.0.66 Description: The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the file upload interface. Recommendations: For versions prior to 26.0.0.66...