CVE-2025-52918

Publication date

2025-06-21 00:00:00

Family

mitre

State

PUBLISHED

Description

Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized access to deactivated interfaces.