← CVE Intelligence

CVE-2026-5922

Poly Voice – Potential Unauthorized Modification of WebUI using XSS Attack PUBLISHED

Description (CNA)

The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage.

Affected (CNA)

Vendor / productVersions
HP Inc. / Poly CCXaffected 0 before 9.5.0
HP Inc. / Poly Edge Eaffected 0 before 8.6.0
HP Inc. / Poly Trio C60affected 0 before 9.5.0

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.