CVE-2026-5922
Poly Voice – Potential Unauthorized Modification of WebUI using XSS Attack
The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage.
CVSS 4.0 · 5.9 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products