CVE-2025-52919: Yealink Rps

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potentially allowing invalid certificates to be uploaded.

Affected products

  • Yealink Rps: before 2025-05-26 (fixed in 2025-05-26)

Published 2025-06-21. Last modified 2026-06-17.