CVE-2026-122148
Description
A flaw was found in the MeetingBoard web management module. An authenticated administrator on the local network can bypass client-side interface controls by directly modifying the web page Document Object Model (DOM). By circumventing these front-end restrictions, an attacker can invoke restricted interfaces to trigger screenshot operations, resulting in unauthorized information disclosure.
Statement
This vulnerability has been rated as Moderate because exploitation requires adjacent network access and existing administrative privileges, limiting the overall attack surface to trusted operators. Furthermore, Yealink MeetingBoard is third-party hardware firmware that is neither packaged nor supported within Red Hat software offerings. Consequently, Red Hat products are unaffected by this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Access Control
Technical Impact: Read Application Data; Modify Application Data; Execute Unauthorized Code or Commands; Gain Privileges or Assume Identity
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
