{"id":"CVE-2026-122148","published":"2026-11-04T19:17:39.890","lastModified":"2026-11-04T19:17:39.890","description":"In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator privileges can modify the page DOM to bypass front-end UI control logic and invoke screenshot-related interfaces, triggering the screenshot function by circumventing front-end interface restrictions. Exploitation can occur only when the attacker has a valid administrator account within the local network.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-602"],"vendors":[],"products":[],"references":[{"url":"https://www.yealink.com/en/trust-center/security-bulletins/web-screenshot-function-front-end-logic-bypass","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}