Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file /api/inner/beforewifitest of the component Web FastCGI Service. The manipulation of the argument port results in stack-based buffer overflow. Access to the local network is required for this attack. The exploit is now public and may be used. The vendor was contacted early about this disclosure and is working on a patch to fix it.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-12218 Stack-Based Buffer Overflow in Yealink SIP-T46U Web FastCGI Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12218
Post summary
The post announces a stack-based buffer overflow vulnerability (CVE‑2026‑12218) affecting Yealink SIP‑T46U's Web FastCGI Service, providing only basic technical details without any PoC, exploit, or patch information.
There is a new vulnerability with elevated criticality in Yealink SIP-T46U (CVE-2026-12218) https://vuldb.com/vuln/370861
Post summary
The post announces that a new critical vulnerability (CVE-2026-12218) has been identified in Yealink SIP‑T46U and provides a link to a vulnerability database entry for further details.