Y
Vendor security profile1 actively exploited CVEs
yealink
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV1
Public exploit3
Patch rate%17
Avg. CVSS7.3
12-month vulnerability rate
0
2
0
0
0
0
0
0
0
0
1
0
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High2 (33%)
Medium2 (33%)
Uncertain1 (17%)
Patch and exploitation view
%17
Verified patch
%17
CISA KEV
%50
Public exploit
1Patch available
0Partial
1Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
4.3
CVE-2025-66737Vulnerability in Yealink Sip T21(p)e2 Firmware
Patch status unknown Public Exploits:1EPSS %1
8.8
CVE-2025-66738Command injection in Yealink Sip T21(p)e2 Firmware
Patch status unknown Public Exploits:1EPSS %1
7.5
CVE-2024-48352Vulnerability in Yealink Meeting Server
Patch status unknownEPSS %0
9.8
CVE-2024-33109Path traversal in Ergophone Tiptel Ip 286
Patch status unknownEPSS %1
-
CVE-2021-27561 Actively exploitedYealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
Workaround Public Exploits:1EPSS %83