High severity7.4NVD Advisory· Published Nov 4, 2026

CVE-2026-122118

Description

In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this weakness via brute-force attacks to gain unauthorized network access and intercept Wi-Fi traffic.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Yealink/Wi-Fi AP functionllm-create
Range: <2026-04-15

Patches

Vulnerability mechanics

References

www.yealink.com/en/trust-center/security-bulletins/wifi-ap-weak-password-vulnerabilitynvd

News mentions

No linked articles in our index yet.

cvss	0.481
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000