Find a vulnerability

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-122148",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-04T21:11:34.926174Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-05T19:06:30.709Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android"
          ],
          "product": "MeetingBoard Pro",
          "vendor": "Yealink",
          "versions": [
            {
              "lessThan": "331.320.0.64",
              "status": "affected",
              "version": "331.320.0.30",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-602",
              "description": "CWE-602 Client-Side Enforcement of Server-Side Security",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T18:22:44.631Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.yealink.com/en/trust-center/security-bulletins/web-screenshot-function-front-end-logic-bypass"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eYealink has remediated the aforementioned security vulnerability. Users can download the patched firmware via links for corresponding versions labeled \"Patched\" under the \"Affected Products\" section.\u003c/div\u003e\u003cdiv\u003eYou can obtain the fixed software at the following URL:\u003c/div\u003e\u003cdiv\u003e\u003ca target=\"_blank\" rel=\"noopener noreferrer\" href=\"https://support.yealink.com/docs/meetingboard-pro/meetingboard-pro-331-320-0-64-firmware-release-note/ccad99a50eb24584b43b5cac9eb5ba03\"\u003ehttps://support.yealink.com/docs/meetingboard-pro/meetingboard-pro-331-320-0-64-firmware-release-note/ccad99a50eb24584b43b5cac9eb5ba03\u003c/a\u003e\u003c/div\u003e\u003cdiv\u003eMitigation Measures (for devices not yet upgraded or unable to be upgraded promptly):Exploitation of this vulnerability requires valid administrator credentials. It is recommended to review the complexity of administrator passwords and potential credential leakage risks. Change passwords to strong, complex passwords in a timely manner.\u003c/div\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "Yealink has remediated the aforementioned security vulnerability. Users can download the patched firmware via links for corresponding versions labeled \"Patched\" under the \"Affected Products\" section.\n\nYou can obtain the fixed software at the following URL:\n\n https://support.yealink.com/docs/meetingboard-pro/meetingboard-pro-331-320-0-64-firmware-release-note/ccad99a50eb24584b43b5cac9eb5ba03 \n\nMitigation Measures (for devices not yet upgraded or unable to be upgraded promptly):Exploitation of this vulnerability requires valid administrator credentials. It is recommended to review the complexity of administrator passwords and potential credential leakage risks. Change passwords to strong, complex passwords in a timely manner."
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-122148",
    "datePublished": "2026-11-04T18:22:44.631Z",
    "dateReserved": "2026-11-04T18:22:44.285Z",
    "dateUpdated": "2026-11-05T19:06:30.709Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}