Threats tagged 'ghsa-9q83-h82m-rw63'

Certain Yealink terminal devices released before April 21, 2026, have an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This vulnerability allows unauthorized users to access 802.1X network authentication credentials. Yealink has addressed this issue in the latest firmware by restricting modification privileges of the 802.1X configuration to administrator accounts only by default.