Y

Yealink

C
CAUTION
23
Total CVEs
5
Crit / High
6
Medium
47%
Unpatched
0%
Patched
5.8
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
47%
Under Review
29%
Pending
24%
✓ 0 patched ✗ 8 unpatched ~ 5 under review ⏳ 4 pending score
▸ Intelligence by Audience
PoC Available
6 / 20 shown
CISA KEV (Exploited)
0
Top EPSS (Exploitation Probability)
CVE-2024-24091 1.13% exploitation probability
CVE-2024-24681 1.03% exploitation probability
CVE-2024-28442 0.84% exploitation probability
CVE-2025-66737 0.66% exploitation probability
CVE-2025-66738 0.63% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
23
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
47%
Avg CVSS score
5.8
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
AVG
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
ICS systems face elevated cyber risk as CISA issues advisories covering multiple vendor vulnerabilities - Industrial Cyber
Industrial Cyber 2025-08-11
Common Office Desk Phone Could Be Leaking Info to Chinese Government, Report Alleges - Defense One
Defense One 2022-01-07
New Mirai Variant Targeting IoT & Network Security Devices - CyberSecurityNews
CyberSecurityNews 2021-03-17
▸ Recent CVEs showing 20 of 17
CVE IDSeverityPatchEPSSDate
CVE-2026-7208 5.3 MEDIUM UNKNOWN / UNPATCHED 0.35% 2026-09-14
CVE-2025-66737 4.3 MEDIUM UNKNOWN / UNPATCHED 0.66% 2025-12-26
CVE-2025-66738 PoC 8.8 HIGH UNKNOWN / UNPATCHED 0.63% 2025-12-26
CVE-2025-68644 PoC 7.4 HIGH PATCH UNDER REVIEW 0.04% 2025-12-21
CVE-2025-14228 5.1 MEDIUM UNKNOWN / UNPATCHED 0.23% 2025-12-08
CVE-2025-52918 PoC 5.0 MEDIUM PATCH UNDER REVIEW 0.20% 2025-06-21
CVE-2025-52916 2.2 LOW PATCH UNDER REVIEW 0.18% 2025-06-21
CVE-2025-52919 PoC 4.3 MEDIUM PATCH UNDER REVIEW 0.11% 2025-06-21
CVE-2025-52917 PoC 4.3 MEDIUM PATCH UNDER REVIEW 0.25% 2025-06-21
CVE-2024-48353 ? N/A UNKNOWN / UNPATCHED 0.38% 2024-11-01
CVE-2024-48352 7.5 HIGH UNKNOWN / UNPATCHED 0.48% 2024-11-01
CVE-2024-31747 2.1 LOW UNKNOWN / UNPATCHED 0.31% 2024-04-29
CVE-2024-30939 6.8 MEDIUM UNKNOWN / UNPATCHED 0.37% 2024-04-25
CVE-2024-28442 7.5 HIGH UNKNOWN / UNPATCHED 0.84% 2024-03-26
CVE-2024-24681 ? N/A UNKNOWN / UNPATCHED 1.03% 2024-02-23
CVE-2022-48625 PoC ? N/A UNKNOWN / UNPATCHED 0.18% 2024-02-19
CVE-2024-24091 ? N/A UNKNOWN / UNPATCHED 1.13% 2024-02-08
View all 17 CVEs for Yealink →
▸Intel
HQXiamen, China
Founded2001
Trust ScoreC — CAUTION
Max CVSS8.0
Last Updated2026-08-03
▸Top Weaknesses
CWE-119
Buffer Overflow
4 occurrences in Yealink CVEs (17% of total)
CWE-119 ⓘ
4
CWE-74
Unknown Weakness Type
3 occurrences in Yealink CVEs (13% of total)
CWE-74 ⓘ
3
CWE-200
Sensitive Information Exposure
2 occurrences in Yealink CVEs (9% of total)
CWE-200 ⓘ
2
CWE-78
Unknown Weakness Type
2 occurrences in Yealink CVEs (9% of total)
CWE-78 ⓘ
2
CWE-22
Unknown Weakness Type
2 occurrences in Yealink CVEs (9% of total)
CWE-22 ⓘ
2
CWE-862
Unknown Weakness Type
2 occurrences in Yealink CVEs (9% of total)
CWE-862 ⓘ
2
CWE-321
Unknown Weakness Type
1 occurrence in Yealink CVEs (4% of total)
CWE-321 ⓘ
1
CWE-312
Unknown Weakness Type
1 occurrence in Yealink CVEs (4% of total)
CWE-312 ⓘ
1
▸Company Profile

Yealink is a Chinese manufacturer of unified communications (UC) and video conferencing equipment, including IP phones, video collaboration endpoints, and headsets. Their products are widely deployed in enterprise environments, making them a target for vulnerabilities that could compromise voice and video communications security.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -12% better
CVE count 2026 vs 2025:  8 → 7 CVEs
Patch Speed ⓘ Poor (>65% open)
47% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€574K
Est. GDPR High
€5.7M

Based on 0 critical CVEs, 0 CISA KEV, 96% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Yealink C valtersit.com