PT-2026-22708 · Poly · Poly Voice

Published 2026-03-03 · Updated 2026-03-03 · CVE-2026-0754

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions Poly Voice (affected versions not specified)

Description An embedded test key and certificate can be extracted from a Poly Voice device using reverse engineering techniques. If a SIP service provider does not properly validate the device certificate, the extracted certificate could be accepted, potentially bypassing authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2026-0754

Affected Products

Poly Voice

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-0754 · Security Note
• https://twitter.com/CVEnew/status/2028683870070317160 · Twitter Post
• https://support.hp.com/us-en/document/ish_14269649-14269682-16/hpsbpy04081 · Note
• https://twitter.com/VulmonFeeds/status/2028673309890486426 · Twitter Post
• https://twitter.com/infoflowcloud/status/2028684532472225865 · Twitter Post
• https://t.me/cveNotify/153879 · Telegram Post
• https://t.me/CVEtracker/46177 · Telegram Post