9.2 CriticalCWE-121
CVE-2026-0826
Poly Voice – Possible Remote Control of Certain Poly Devices
HP Inc.poly_trio_8300
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
32%probability of exploitation in the next 30 days
Higher than 98% of scored CVEs
SeverityCVSS
9.2Critical
Description NVD
In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform.
Coverage 1 article · 1 outlet
- HP Poly VoIP phones hit by critical RCE flaw CVE-2026-0826Security Affairs · first in our coverage