Description
Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HP | Poly CCX | < 9.50 | 9.50 |
| HP | Poly Edge E | < 8.6.0 | 8.6.0 |
| HP | Poly Trio C60 | < 9.5.0 | 9.5.0 |
Medium · 6.0
CVE-2026-5923
EUVD-2026-42442GHSA-wj85-38pj-pr6j
Poly Voice – Potential Unauthorized Modification of WebUI using CSRF Attack
Published Jul 8, 2026 · Updated Jul 9, 2026 · Assigned by hp