{"affected":[{"defaultStatus":"unaffected","product":"AVHub","source":"CNA: mitre","vendor":"Yealink","versions":[{"lessThan":"153.135.0.76","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"UVC86","source":"CNA: mitre","vendor":"Yealink","versions":[{"lessThan":"151.435.0.66","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"SmartVision 80","source":"CNA: mitre","vendor":"Yealink","versions":[{"lessThan":"321.435.0.86","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"UVC40 E2","source":"CNA: mitre","vendor":"Yealink","versions":[{"lessThan":"319.410.0.66","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"MeetingBorard C","source":"CNA: mitre","vendor":"Yealink","versions":[{"lessThan":"328.321.0.40","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"MeetingBar A10","source":"CNA: mitre","vendor":"Yealink","versions":[{"lessThan":"278.320.0.86","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"MeetingBar A40","source":"CNA: mitre","vendor":"Yealink","versions":[{"lessThan":"289.320.0.81","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"MeetingBar A50","source":"CNA: mitre","vendor":"Yealink","versions":[{"lessThan":"323.320.0.54","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-122118","cwes":["CWE-334"],"description":"In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.4,"severity":"high","source":"CNA: mitre","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793822457515,"publishedAt":1793814948068,"references":[{"source":"CNA: mitre","tags":[],"url":"https://www.yealink.com/en/trust-center/security-bulletins/wifi-ap-weak-password-vulnerability"}],"remediation":[],"revision":"8d2160529606cabfc9b917ff7ab5b4c4e26f1bb428e4849c1f0dae072e46c4e5","sources":[{"modifiedAt":1793822457515,"name":"CNA: mitre","retrievedAt":1793826718205,"url":"https://www.cve.org/CVERecord?id=CVE-2026-122118"}],"ssvc":{"assessedAt":1793822046590,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2026-122118","updatedAt":1793826718205}