CVE-2026-0754 — SIP Service Providers – Possible Impersonation of Poly Voice Device

CVE-2026-0754

SIP Service Providers – Possible Impersonation of Poly Voice Device PUBLISHED

Description (CNA)

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate.

Affected (CNA)

Vendor / product	Versions
HP Inc / VVX	affected 0 before <UCS 6.4.8
HP Inc / Edge E	affected 0 before <PVOS 8.5.0
HP Inc / Trio 8300	affected 0 before <UCS 8.1.7.c

CWE

CWE-321

References

https://support.hp.com/us-en/document/ish_14269649-14269682-16/hpsbpy04081

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.