CVE-2019-14656

CVE-2019-14656 is a high-severity vulnerability affecting various Yealink phone models, including the T49G, T58V, and VP59. It allows a low-privileged default "User" account to execute administrative actions via HTTP POST requests due to improper user role checks. With a CVSS score of 8.8, this flaw presents a significant risk of complete compromise of confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or active exploitation have been identified, its high FAUCET Risk Score and low EPSS indicate a potential for future exploitation despite minimal community discussion or media coverage.