CVE-2026-122148 · Infrastructure
NO FIX YET · SEE WHAT TO DO
Yealink MeetingBoard Pro, a meeting room display device, has a web management page that relies on front-end checks to restrict screenshot actions. An administrator on the local network can edit the page to skip those checks and trigger screenshot functions they should not reach.
first public Nov 4, 2026 · 1 source
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Only devices running Yealink MeetingBoard Pro firmware before 331.320.0.64 that have a web management interface reachable from the local network are exposed. The attacker must already hold a valid administrator account on the device, so limiting admin accounts and restricting device web access reduces exposure. Teams with no such devices can skip it.
Not affected if no-admin-exposure, not-deployed
Who cares collaboration-devices, meetingboard-pro, yealink
331.320.0.64; versions below it are in the affected range331.320.0.64 or laterIn Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.
This page as .md · .json · in your agent: get_signal("CVE-2026-122148") · CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.