Threats tagged 'ghsa-763v-w5mm-jf4f'

Certain Yealink products released before April 15, 2026, have a vulnerability in their Wi-Fi AP function where a default 8-digit numeric pre-shared key (PSK) with insufficient strength is used. This weak PSK can be brute-forced by attackers to gain unauthorized network access and intercept Wi-Fi traffic. The vulnerability has a high severity score of 7.4 and impacts confidentiality but not integrity or availability.