---
id: "CVE-2026-122124"
kind: "vulnerability"
aliases: ["CVE-2026-122124"]
title: "Yealink UVC40 E2: physical USB access steals Wi-Fi credentials and grants root"
severity: "medium"
cvss: 6.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["firmware", "infrastructure", "uvc40-e2", "video-conferencing", "wifi", "yealink"]
not_affected_if: ["firmware-319.410.0.71-or-later", "no-public-physical-access", "no-wifi-configured"]
published_at: "2026-11-04T19:17:39+00:00"
first_seen_at: "2026-11-04T19:28:48+00:00"
updated_at: "2026-11-04T19:30:16+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122124", "first_seen_at": "2026-11-04T19:28:48+00:00"}]
---

# Yealink UVC40 E2: physical USB access steals Wi-Fi credentials and grants root

Yealink UVC40 E2 video conferencing devices before firmware 319.410.0.71 leak Wi-Fi credentials and sensitive firmware configuration over the USB interface. An attacker with brief physical access can use that data to gain root on the device and, within Wi-Fi range, eavesdrop on audio and video without an LED alert.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the firmware version on the UVC40 E2 device against `319.410.0.71`.
- Identify UVC40 E2 units in meeting rooms or other spaces where visitors could reach the USB port.

## Fix

- Yealink UVC40 E2 firmware: move to `319.410.0.71` or later.

## Timeline

- 2026-11-04T19:28:48+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122124

## From the sources

On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface. Sensitive data within the firmware configuration can be abused to gain root privileges on the device. Within Wi‑Fi coverage, the attacker may perform audio and video eavesdropping with no LED alert from the device.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_