CVE-2026-2891
High
Description
The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities.
SeverityHigh
CVSS8.2
Exploit probability—
ProductTrio C60
PublishedJul 1, 2026
First seenJul 1, 2026
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- HP Inc Trio C609.5.0 or later
- HP Inc CCX9.50 or later
- HP Inc Edge E8.6.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc Trio C60 | v < 9.5.0 | 9.5.0 |
| HP Inc CCX | v < 9.50 | 9.50 |
| HP Inc Edge E | v < 8.6.0 | 8.6.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.