PT-2026-49137 · Yealink · Sip-T46U

Cookedmelon · CVE-2026-12221 · Published 2026-06-14 · Updated 2026-06-27

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Yealink SIP-T46U version 108.86.0.118

Description A stack-based buffer overflow occurs in the Firmware Chunk Upload Handler component within the sprintf() function of the file /api/upgrade/upgrade. This issue is triggered by manipulating the uid/start offset argument. Exploitation requires the attacker to be located within the local network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2026-12221

Affected Products

Sip-T46U

References · 10

• 🔥 http://cdn2.v50to.cc/T46U/T46U_mod_upgrade_Upgrade_chunk_stack_overflow.zip · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-12221 · Security Note
• https://vuldb.com/cve/CVE-2026-12221 · Note
• https://vuldb.com/submit/834207 · Note
• https://twitter.com/vuldb/status/2066161040749187582 · Twitter Post
• https://t.me/cveNotify/177925 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2066421240617664517 · Twitter Post
• https://vuldb.com/vuln/370864 · Note
• https://vuldb.com/vuln/370864/cti · Note
• https://t.me/CVEtracker/56841 · Telegram Post