CVE-2026-122148 | BDVDB-2026-400429 Detail

Description#

In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-11-04Record published in the CVE List.
2. Version 22026-11-05Most recent update recorded in the CVE List.