Vulnerabilities > Yealink > Yealink Meeting Server > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-02-08 CVE-2024-24091 OS Command Injection vulnerability in Yealink Meeting Server
Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file upload interface.
network
low complexity
yealink CWE-78
critical
9.8