CVE-2026-122116: Yealink T3XW Series Phones vulnerability
Yealink · T3XW Series Phones
Vendor fix available · Affected: Yealink T3XW Series Phones · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 24% of scored CVEs
DescriptionCVE.org
Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.
Affected products13
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Yealink · T3XW Series Phonesfrom 124.85.0.1 before 124.87.0.22
- Yealink · T4X Series Phonesfrom 108.85.0.1 before 108.87.0.23
- Yealink · T5X Series Phonesfrom 96.85.0.1 before 96.87.0.24
- Yealink · T7X Series Phonesfrom 185.87.0.5 before 185.87.0.39
- Yealink · SIP-T85W、SIP-T87Wfrom 185.87.0.5 before 185.87.0.39
- Yealink · AX83H、AX86Rfrom 180.86.0.1 before 180.87.0.15
- Yealink · CP925from 148.85.0.1 before 148.87.0.41
- Yealink · CP935Wfrom 149.85.0.1 before 149.87.0.41
- Yealink · MP E2 Teams Seriesfrom 176.15.0.1 before 176.15.0.191
- Yealink · VP59 Teamsfrom 91.15.0.1 before 91.15.1.37
- Yealink · SIP-T58Wfrom 150.86.0.5 before 150.87.0.22
- Yealink · VP59from 91.86.0.5 before 91.87.0.27
- Yealink · CP965from 143.86.0.5 before 143.87.0.27
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Yealink
- Published
- November 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-122116 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.