8.2 High

CVE-2026-2891 The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP…

Description

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities.

Affected products and versions

Product	Affected versions	Fixed in
CCX 9.50	earliest → < 9.50	9.50
Trio C60 9.5	earliest → < 9.5.0	9.5.0
Edge E 8.6	earliest → < 8.6.0	8.6.0

References

support.hp.com support.hp.com

Timeline

Published July 1, 2026
Last modified July 1, 2026

Track this CVE