CVE-2026-122120

Summary

A flaw in Yealink Plug-in Softwares before 2.35.219.0 allows unauthorized file writes under specific scenarios, potentially leading to remote code execution (RCE) if an attacker can place malicious files on the system.

Exploitability

Exploitation is difficult due to high attack complexity (AC:H) and likely requires specific conditions or configurations to trigger the vulnerable path.

Blast radius

Successful exploitation could allow full compromise of confidentiality, integrity, and availability on the affected system, potentially affecting downstream services or users relying on the software.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Yealink Plug-in Softwares version 2.35.219.0 or later to address the unauthorized file write vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.