EIP-2026-102130

This exploit leverages an authentication bypass vulnerability in YeaLink IP Phone SIP-TxxP firmware <=9.70.0.100 to initiate unauthorized phone calls. It sends a crafted HTTP request to the phone's CGI interface, bypassing user confirmation.