CVE-2026-1735: Yealink MeetingBar A30 Diagnostic command injection

Published Feb 2, 2026

Updated

A weakness has been identified in Yealink MeetingBar A30 133.321.0.3. This issue affects some unknown processing of the component Diagnostic Handler. This manipulation causes command injection. It is feasible to perform the attack on the physical device. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

Yealink MeetingBar A30

Event History

Feb 2, 2026

CVE Published

via MITRE·12:02 AM

Data Sourced

via MITRE·12:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-1735?

CVE-2026-1735 is classified as a high severity vulnerability due to its potential for command injection.

How do I fix CVE-2026-1735?

To fix CVE-2026-1735, it's essential to apply the latest firmware update provided by Yealink for the MeetingBar A30.

What is the impact of CVE-2026-1735?

The impact of CVE-2026-1735 includes unauthorized command execution, which could compromise the device and its environment.

Which product is affected by CVE-2026-1735?

CVE-2026-1735 affects the Yealink MeetingBar A30 model.

Can CVE-2026-1735 be exploited remotely?

Yes, CVE-2026-1735 can potentially be exploited remotely if the attacker has access to the device's management interfaces.