5.9
Medium
CVE-2026-5922 The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s…
Description
The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Poly CCX 9.5 | earliest → < 9.5.0 | 9.5.0 |
| Poly Edge E 8.6 | earliest → < 8.6.0 | 8.6.0 |
| Poly Trio C60 9.5 | earliest → < 9.5.0 | 9.5.0 |