CVE-2026-122118 (CVSS 7.4)

Description

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic.

Is your site exposed to CVE-2026-122118?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.4

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS — Exploit Prediction

0.0021

Probability of exploitation

0.11%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

Weakness Type (CWE)

CWE-334 CWE-334

References

Other References

https://www.yealink.com/en/trust-center/security-bulletins/wifi-ap-weak-password-vulnerability

Frequently Asked Questions

What is CVE-2026-122118? +

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic. It has a CVSS v3.1 base score of 7.4 (HIGH).

How severe is CVE-2026-122118? +

CVE-2026-122118 has a CVSS v3.1 score of 7.4 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0021, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-122118? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-3895

Token used for resetting passwords in MegaBIP software are generated using a small space of random values combined with a …

CVE-2024-6890 8.8

Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation …

CVE-2023-6951 6.6

A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a …

CVE-2024-54017 5.3

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), …

CVE-2024-52616 5.3

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them …

CVE-2024-51720 4.8

An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow …