CVE-2026-0754

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate.

Score

CVSS 4.0 8.2 High

Status

Awaiting Analysis - hp-security-alert@hp.com

Published

2026-03-03

Last modified

2026-03-03

Weaknesses

CWE-321

Affected products

• Edge E (Hp Inc)
• Trio 8300 (Hp Inc)
• Vvx (Hp Inc)

References

• https://support.hp.com/us-en/document/ish_14269649-14269682-16/hpsbpy04081