---
id: "CVE-2026-122116"
kind: "vulnerability"
aliases: ["CVE-2026-122116"]
title: "Yealink terminal devices: Wi-Fi 802.1X credentials exposed to unauthorized users"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["802.1x", "infrastructure", "peap", "voip-phones", "wi-fi", "yealink"]
not_affected_if: ["latest-firmware", "no-802.1x-peap"]
published_at: "2026-11-04T18:17:43+00:00"
first_seen_at: "2026-11-04T18:28:34+00:00"
updated_at: "2026-11-04T18:29:41+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122116", "first_seen_at": "2026-11-04T18:28:34+00:00"}]
---

# Yealink terminal devices: Wi-Fi 802.1X credentials exposed to unauthorized users

Certain Yealink terminal devices running firmware before 2026-04-21 have an access control flaw in the Wi-Fi 802.1X PEAP network configuration function. An attacker with access to the device's configuration can read deployed 802.1X network authentication credentials.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed firmware version on each Yealink terminal against the fixed release from the vendor (unknown in the sources).
- Check whether 802.1X PEAP Wi-Fi is configured on the device; the sources do not name a specific setting to inspect.

## Fix

- Move to the latest Yealink firmware, which restricts 802.1X configuration modification to administrator accounts only by default. Exact fixed version: unknown.

## Timeline

- 2026-11-04T18:28:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122116

## From the sources

Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed this vulnerability by restricting 802.1X configuration modification privileges to administrator accounts only by default.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_