VulnSocial

CVE-2026-12222General

LOWCVSS 7.3 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was determined in Yealink SIP-T46U 108.86.0.118. Affected is the function mod_webd.BlueToothTest of the file /api/inner/bttest of the component Web FastCGI Service. Executing a manipulation of the argument btMac/pin/reserved can lead to stack-based buffer overflow. The attack needs to be done within the local network. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure and is working on a patch to fix it.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-06-14); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-14: 1Mentions · 2026-06-15: 1Mentions · 2026-07-23: 1PoC Mentioned / Linked · 2026-07-23: 1Exploit Tool / Code · 2026-07-23: 1Technical Details · 2026-06-15: 106-1406-1507-23
Signal classification3 categories
General
133.3%
Disclosure
133.3%
PoC
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-141
General1
2026-06-151
Disclosure1
2026-07-231
PoC1
Full discourse3 posts
  • MalwareObserver@MalwareObserver
    PoC

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-12222](http://cdn2.v50to.cc/T46U/T46U_mod_webd_BlueToothTest_off_by_one.zip) A vulnerab... http://cdn2.v50to.cc/T46U/T46U_mod_webd_BlueToothTest_off_by_one.zip #CVE #ZeroDay #PatchManagement

    Post summary

    The post references CVE‑2026‑12222 and links to a ZIP that likely contains proof‑of‑concept exploitation code, but provides no details on active exploitation, fixes, or technical specifics.

    0000035
    13 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-12222 Stack-Based Buffer Overflow in Yealink SIP-T46U Web FastCGI Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12222

    Post summary

    A brief notice announces the identification of CVE-2026-12222 as a stack‑based buffer overflow affecting the Yealink SIP‑T46U Web FastCGI service, with a link to a vulnerability detail page.

    0000043
    4.0K followersView on X
  • VulDB 🛡@vuldb
    General

    We have just added an important vulnerability affecting Yealink SIP-T46U (CVE-2026-12222) https://vuldb.com/vuln/370865

    Post summary

    The post announces the addition of a vulnerability entry for Yealink SIP-T46U (CVE-2026-12222) with a reference link, but offers no further technical or exploitation details.

    0000067
    2.2K followersView on X

Explore more

Back to dashboard