CVE-2026-0826 — Poly Voice – Possible Remote Control of Certain Poly Devices

CVE-2026-0826

Poly Voice – Possible Remote Control of Certain Poly Devices PUBLISHED

Description (CNA)

In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform.

Affected (CNA)

Vendor / product	Versions
HP Inc. / poly_trio_8300	affected 0 before 8.1.7
HP Inc. / poly_trio_8500	affected 0 before 7.2.8
HP Inc. / poly_trio_8800	affected 0 before 7.2.8
HP Inc. / poly_vvx	affected 0 before 6.4.8

CWE

CWE-121

References

https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.