Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-5923

Poly Voice – Potential Unauthorized Modification of WebUI using CSRF Attack

Description

Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HP Inc. Poly CCX

Default version status: unknown

  • 0 to < 9.50affected

HP Inc. Poly Edge E

Default version status: unknown

  • 0 to < 8.6.0affected

HP Inc. Poly Trio C60

Default version status: unknown

  • 0 to < 9.5.0affected

References