CVE-2026-122148
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.
| CWE | CWE-602 |
| Vendor | yealink |
| Product | meetingboard pro |
| Published | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for yealink meetingboard pro
Be the first to know when new unknown vulnerabilities affecting yealink meetingboard pro are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Yealink / MeetingBoard Pro
331.320.0.30 < 331.320.0.64