CVE-2025-52916
Yealink RPS lacks rate limiting, enabling enumeration MAC addresses
CVE disclosures
Confirmed vulnerabilities discovered and responsibly disclosed by CloudAware.
CVE
CVE-2025-52917
Yealink RPS-API lacks rate limiting, enabling enumeration of '2FA'
CVE-2025-52918
Yealink RPS-API authentication bypass for blocked accounts
CVE-2025-52919
Certificate upload function lacks input validation
CVE-2024-24681
Yealink leaked RSA key
CVE-2024-48939
Paxton license key bypass
CVE-2024-55447
Paxton PII leak and access control
CVE-2023-43870
Paxton leaked private key root cert
CVE-2022-48625
Yealink leaked AES key