CVE-2026-122148
— UNSCOREDPublished 2026-11-04 · Updated 2026-11-04
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.
Weaknesses
CWE-602
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100306PoC
- UNSCOREDCVE-2026-110314PoC
- MEDIUMCVE-2026-116605PoC
- MEDIUMCVE-2026-117554PoC
- MEDIUMCVE-2026-119746
- HIGHCVE-2026-13138
- MEDIUMCVE-2026-77320PoC
- MEDIUMCVE-2026-89205
Related by shared AI tags and CWE weakness class. Browse the full archive.