{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-122148", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-11-04T18:22:44.285Z", "datePublished": "2026-11-04T18:22:44.631Z", "dateUpdated": "2026-11-04T18:22:44.631Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Android"], "product": "MeetingBoard Pro", "vendor": "Yealink", "versions": [{"lessThan": "331.320.0.64", "status": "affected", "version": "331.320.0.30", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "baseScore": 8.2, "baseSeverity": "HIGH", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-602", "description": "CWE-602 Client-Side Enforcement of Server-Side Security", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-11-04T18:22:44.631Z"}, "references": [{"url": "https://www.yealink.com/en/trust-center/security-bulletins/web-screenshot-function-front-end-logic-bypass"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<div>Yealink has remediated the aforementioned security vulnerability. Users can download the patched firmware via links for corresponding versions labeled \"Patched\" under the \"Affected Products\" section.</div><div>You can obtain the fixed software at the following URL:</div><div><a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://support.yealink.com/docs/meetingboard-pro/meetingboard-pro-331-320-0-64-firmware-release-note/ccad99a50eb24584b43b5cac9eb5ba03\">https://support.yealink.com/docs/meetingboard-pro/meetingboard-pro-331-320-0-64-firmware-release-note/ccad99a50eb24584b43b5cac9eb5ba03</a></div><div>Mitigation Measures (for devices not yet upgraded or unable to be upgraded promptly):Exploitation of this vulnerability requires valid administrator credentials. It is recommended to review the complexity of administrator passwords and potential credential leakage risks. Change passwords to strong, complex passwords in a timely manner.</div>\n\n<br>"}], "value": "Yealink has remediated the aforementioned security vulnerability. Users can download the patched firmware via links for corresponding versions labeled \"Patched\" under the \"Affected Products\" section.\n\nYou can obtain the fixed software at the following URL:\n\n https://support.yealink.com/docs/meetingboard-pro/meetingboard-pro-331-320-0-64-firmware-release-note/ccad99a50eb24584b43b5cac9eb5ba03 \n\nMitigation Measures (for devices not yet upgraded or unable to be upgraded promptly):Exploitation of this vulnerability requires valid administrator credentials. It is recommended to review the complexity of administrator passwords and potential credential leakage risks. Change passwords to strong, complex passwords in a timely manner."}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Android"], "product": "MeetingBoard Pro", "vendor": "Yealink", "versions": [{"lessThan": "331.320.0.64", "status": "affected", "version": "331.320.0.30", "versionType": "custom"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network."}], "id": "CVE-2026-122148", "lastModified": "2026-11-04T19:17:39.890", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "[email protected]", "type": "Secondary"}]}, "published": "2026-11-04T19:17:39.890", "references": [{"source": "[email protected]", "url": "https://www.yealink.com/en/trust-center/security-bulletins/web-screenshot-function-front-end-logic-bypass"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-602"}], "source": "[email protected]", "type": "Primary"}]}

{}

{}