EIP-2026-102131

This exploit demonstrates multiple vulnerabilities in YeaLink IP Phone SIP-TxxP firmware <=9.70.0.100, including CSRF to enable telnet, default credentials for shell access, and a remote buffer overflow in the /yealink/bin/macd process. It includes functional Python scripts to enable telnet and execute commands via default credentials.