CVE-2026-122124

A flaw was found in Yealink UVC40. An attacker with physical access to the device can exploit sensitive configuration data through the USB Universal Serial Bus interface to obtain root-level administrative privileges. This issue also allows the attacker to extract stored Wi-Fi network credentials...