{"api_version":"1","generated_at":"2026-11-05T02:24:32+00:00","cve":"CVE-2026-122148","urls":{"html":"https://cve.report/CVE-2026-122148","api":"https://cve.report/api/cve/CVE-2026-122148.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-122148","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-122148"},"summary":{"title":"CVE-2026-122148","description":"In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.","state":"PUBLISHED","assigner":"mitre","published_at":"2026-11-04 19:17:39","updated_at":"2026-11-04 19:17:39"},"problem_types":["CWE-602","CWE-602 CWE-602 Client-Side Enforcement of Server-Side Security"],"metrics":[{"version":"4.0","source":"cve@mitre.org","type":"Secondary","score":"8.2","severity":"HIGH","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}},{"version":"4.0","source":"CNA","type":"CVSS","score":"8.2","severity":"HIGH","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N","data":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","baseScore":8.2,"baseSeverity":"HIGH","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"}}],"references":[{"url":"https://www.yealink.com/en/trust-center/security-bulletins/web-screenshot-function-front-end-logic-bypass","name":"https://www.yealink.com/en/trust-center/security-bulletins/web-screenshot-function-front-end-logic-bypass","refsource":"cve@mitre.org","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-122148","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122148","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Yealink","product":"MeetingBoard Pro","version":"affected 331.320.0.30 331.320.0.64 custom","platforms":["Android"]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"Yealink has remediated the aforementioned security vulnerability. Users can download the patched firmware via links for corresponding versions labeled \"Patched\" under the \"Affected Products\" section.\n\nYou can obtain the fixed software at the following URL:\n\n https://support.yealink.com/docs/meetingboard-pro/meetingboard-pro-331-320-0-64-firmware-release-note/ccad99a50eb24584b43b5cac9eb5ba03 \n\nMitigation Measures (for devices not yet upgraded or unable to be upgraded promptly):Exploitation of this vulnerability requires valid administrator credentials. It is recommended to review the complexity of administrator passwords and potential credential leakage risks. Change passwords to strong, complex passwords in a timely manner.","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","platforms":["Android"],"product":"MeetingBoard Pro","vendor":"Yealink","versions":[{"lessThan":"331.320.0.64","status":"affected","version":"331.320.0.30","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network."}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","baseScore":8.2,"baseSeverity":"HIGH","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-602","description":"CWE-602 Client-Side Enforcement of Server-Side Security","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-04T18:22:44.631Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"url":"https://www.yealink.com/en/trust-center/security-bulletins/web-screenshot-function-front-end-logic-bypass"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"
Yealink has remediated the aforementioned security vulnerability. Users can download the patched firmware via links for corresponding versions labeled \"Patched\" under the \"Affected Products\" section.
You can obtain the fixed software at the following URL:
https://support.yealink.com/docs/meetingboard-pro/meetingboard-pro-331-320-0-64-firmware-release-note/ccad99a50eb24584b43b5cac9eb5ba03
Mitigation Measures (for devices not yet upgraded or unable to be upgraded promptly):Exploitation of this vulnerability requires valid administrator credentials. It is recommended to review the complexity of administrator passwords and potential credential leakage risks. Change passwords to strong, complex passwords in a timely manner.
\n\n
"}],"value":"Yealink has remediated the aforementioned security vulnerability. Users can download the patched firmware via links for corresponding versions labeled \"Patched\" under the \"Affected Products\" section.\n\nYou can obtain the fixed software at the following URL:\n\n https://support.yealink.com/docs/meetingboard-pro/meetingboard-pro-331-320-0-64-firmware-release-note/ccad99a50eb24584b43b5cac9eb5ba03 \n\nMitigation Measures (for devices not yet upgraded or unable to be upgraded promptly):Exploitation of this vulnerability requires valid administrator credentials. It is recommended to review the complexity of administrator passwords and potential credential leakage risks. Change passwords to strong, complex passwords in a timely manner."}],"x_generator":{"engine":"CVE-Request-form 0.0.1"}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2026-122148","datePublished":"2026-11-04T18:22:44.631Z","dateReserved":"2026-11-04T18:22:44.285Z","dateUpdated":"2026-11-04T18:22:44.631Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-04 19:17:39","lastModifiedDate":"2026-11-04 19:17:39","problem_types":["CWE-602","CWE-602 CWE-602 Client-Side Enforcement of Server-Side Security"],"metrics":{"cvssMetricV40":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"122148","Ordinal":"1","Title":"CVE-2026-122148","CVE":"CVE-2026-122148","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"122148","Ordinal":"1","NoteData":"In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.","Type":"Description","Title":"CVE-2026-122148"}]}}}