VulnerabilityAwaiting Analysis

CVE-2026-0826

In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform.

CRITICAL 9.2EPSS 32.2%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 32.2%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform.

CVSS 4.0: 9.2 CRITICALCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 32.23% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-121
Source: hp-security-alert@hp.com

References

https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.