CVE-2026-0754 - SIP Service Providers – Possible Impersonation of Poly Voice Device

Back Back to CVE browser

HIGH

SIP Service Providers – Possible Impersonation of Poly Voice Device

Published Mar 3, 2026

8.2

HIGH

CVSS 4.0

EPSS 0.09%

Description

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate.

Affected products

Vendor HP Inc Product Edge E Default
unaffected
Affected
- ≥ 0, < <PVOS 8.5.0
Vendor HP Inc Product Trio 8300 Default
unaffected
Affected
- ≥ 0, < <UCS 8.1.7.c
Vendor HP Inc Product VVX Default
unaffected
Affected
- ≥ 0, < <UCS 6.4.8

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
HP Inc	Edge E	unaffected	Affected ≥ 0, < <PVOS 8.5.0
HP Inc	Trio 8300	unaffected	Affected ≥ 0, < <UCS 8.1.7.c
HP Inc	VVX	unaffected	Affected ≥ 0, < <UCS 6.4.8