CVE-2026-5923 Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage

Description

Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage.

Affected products and versions

Product	Affected versions	Fixed in
Poly CCX 9.50	earliest → < 9.50	9.50
Poly Edge E 8.6	earliest → < 8.6.0	8.6.0
Poly Trio C60 9.5	earliest → < 9.5.0	9.5.0

Other CVEs of Poly CCX

The 2 CVEs of Poly CCX →

CVE-2026-5922 The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s… 5.9 Medium