PT-2026-49181 · Yealink · Sip-T46U

Cookedmelon · CVE-2026-12220 · Published 2026-06-15 · Updated 2026-07-04

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Yealink SIP-T46U version 108.86.0.118

Description A stack-based buffer overflow exists in the Firmware Chunk Upload handler. This occurs when the uid argument is manipulated within the mod upgrade.SparePartsUpload function of the '/api/upgrade/accupgradebychunk' endpoint. This issue can only be exploited by an attacker located within the local network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2026-12220

Affected Products

Sip-T46U

References · 10

• 🔥 http://cdn2.v50to.cc/T46U/T46U_mod_upgrade_SparePartsUpload_stack_overflow.zip · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-12220 · Security Note
• https://vuldb.com/vuln/370863/cti · Note
• https://t.me/cveNotify/177924 · Telegram Post
• https://vuldb.com/vuln/370863 · Note
• https://vuldb.com/submit/834205 · Note
• https://vuldb.com/cve/CVE-2026-12220 · Note
• https://twitter.com/Tank23x0/status/2073421071798415393 · Twitter Post
• https://t.me/CVEtracker/56840 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2066423800414028259 · Twitter Post