https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-66737.htmlhttps://patchthecve.com/cve/CVE-2025-66737.htmlTue, 13 Oct 2026 09:10:00 +0000MEDIUM 4.3: Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component.https://patchthecve.com/cve/CVE-2025-66738.htmlhttps://patchthecve.com/cve/CVE-2025-66738.htmlWed, 07 Oct 2026 13:10:00 +0000HIGH 8.8: An issue in Yealink T21P_E2 Phone 52.84.0.15 allows a remote normal privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component.https://patchthecve.com/cve/CVE-2024-48353.htmlhttps://patchthecve.com/cve/CVE-2024-48353.htmlWed, 17 Jun 2026 07:58:26 +0000HIGH 7.5: Yealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a front-end JS file and decrypt the plaintext passwords based on the obtained key information.https://patchthecve.com/cve/CVE-2024-48352.htmlhttps://patchthecve.com/cve/CVE-2024-48352.htmlSun, 05 Jul 2026 01:20:43 +0000HIGH 7.5: Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTTP request with enterprise ID.https://patchthecve.com/cve/CVE-2024-33109.htmlhttps://patchthecve.com/cve/CVE-2024-33109.htmlSun, 05 Jul 2026 01:19:43 +0000CRITICAL 9.9: Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.https://patchthecve.com/cve/CVE-2024-31747.htmlhttps://patchthecve.com/cve/CVE-2024-31747.htmlWed, 17 Jun 2026 07:28:42 +0000LOW 2.1: An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 (fixed in 122.15.0.142) allows a physically proximate attacker to disable the phone lock via the Walkie Talkie menu option.https://patchthecve.com/cve/CVE-2024-28442.htmlhttps://patchthecve.com/cve/CVE-2024-28442.htmlWed, 17 Jun 2026 07:21:27 +0000HIGH 7.5: Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use function in the company portal component.