CVE-2026-0826 - Vulnerability Details - OpenCVE

In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Hp Inc.	Poly Trio 8300 Poly Trio 8500 Poly Trio 8800

No data.

No data.

References

Link	Providers
https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083

History

Mon, 01 Jun 2026 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 01 Jun 2026 15:00:00 +0000

Type	Values Removed	Values Added
Description		In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform.
Title		Poly Voice – Possible Remote Control of Certain Poly Devices
First Time appeared		Hp Inc. Hp Inc. poly Trio 8300 Hp Inc. poly Trio 8500 Hp Inc. poly Trio 8800
Weaknesses		CWE-121
CPEs		cpe:2.3:h:hp_inc.:poly_trio_8300:::linux:::::* cpe:2.3:h:hp_inc.:poly_trio_8500:::linux:::::* cpe:2.3:h:hp_inc.:poly_trio_8800:::linux:::::*
Vendors & Products		Hp Inc. Hp Inc. poly Trio 8300 Hp Inc. poly Trio 8500 Hp Inc. poly Trio 8800
References		https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083
Metrics		cvssV4_0 `{'score': 9.2, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: hp

Published: 2026-06-01T14:55:00.291Z

Updated: 2026-06-01T15:32:48.299Z

Reserved: 2026-01-09T19:09:26.210Z

Link: CVE-2026-0826

Vulnrichment

Updated: 2026-06-01T15:32:41.926Z

NVD

Status : Awaiting Analysis

Published: 2026-06-01T15:16:29.043

Modified: 2026-06-01T17:07:57.203

Link: CVE-2026-0826

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0826", "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "state": "PUBLISHED", "assignerShortName": "hp", "dateReserved": "2026-01-09T19:09:26.210Z", "datePublished": "2026-06-01T14:55:00.291Z", "dateUpdated": "2026-06-01T15:32:48.299Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "shortName": "hp", "dateUpdated": "2026-06-01T14:55:00.291Z"}, "title": "Poly Voice \u2013 Possible Remote Control of Certain Poly Devices", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "CWE-121: Stack-based Buffer Overflow", "type": "CWE"}]}], "affected": [{"vendor": "HP Inc.", "product": "poly_trio_8300", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "8.1.7", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc.", "product": "poly_trio_8500", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "7.2.8", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "HP Inc.", "product": "poly_trio_8800", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "7.2.8", "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:h:hp_inc.:poly_trio_8300:*:*:linux:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "8.1.7"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:h:hp_inc.:poly_trio_8500:*:*:linux:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "7.2.8"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:h:hp_inc.:poly_trio_8800:*:*:linux:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "7.2.8"}]}]}], "descriptions": [{"lang": "en", "value": "In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable\n remote code execution on Poly Voice products on the Linux platform.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable\n remote code execution on Poly Voice products on the Linux platform."}]}], "references": [{"url": "https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.2, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-01T15:32:38.493836Z", "id": "CVE-2026-0826", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-01T15:32:48.299Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0826", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-01T15:32:38.493836Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-01T15:32:41.926Z"}}], "cna": {"title": "Poly Voice \u2013 Possible Remote Control of Certain Poly Devices", "source": {"discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "HP Inc.", "product": "poly_trio_8300", "versions": [{"status": "affected", "version": "0", "lessThan": "8.1.7", "versionType": "custom"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}, {"vendor": "HP Inc.", "product": "poly_trio_8500", "versions": [{"status": "affected", "version": "0", "lessThan": "7.2.8", "versionType": "custom"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}, {"vendor": "HP Inc.", "product": "poly_trio_8800", "versions": [{"status": "affected", "version": "0", "lessThan": "7.2.8", "versionType": "custom"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}], "references": [{"url": "https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083"}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable\n remote code execution on Poly Voice products on the Linux platform.", "supportingMedia": [{"type": "text/html", "value": "In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable\n remote code execution on Poly Voice products on the Linux platform.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121: Stack-based Buffer Overflow"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hp_inc.:poly_trio_8300:*:*:linux:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "8.1.7", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hp_inc.:poly_trio_8500:*:*:linux:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.2.8", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hp_inc.:poly_trio_8800:*:*:linux:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.2.8", "versionStartIncluding": "0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "shortName": "hp", "dateUpdated": "2026-06-01T14:55:00.291Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0826", "state": "PUBLISHED", "dateUpdated": "2026-06-01T15:32:48.299Z", "dateReserved": "2026-01-09T19:09:26.210Z", "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "datePublished": "2026-06-01T14:55:00.291Z", "assignerShortName": "hp"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable\n remote code execution on Poly Voice products on the Linux platform."}], "id": "CVE-2026-0826", "lastModified": "2026-06-01T17:07:57.203", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.2, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "hp-security-alert@hp.com", "type": "Secondary"}]}, "published": "2026-06-01T15:16:29.043", "references": [{"source": "hp-security-alert@hp.com", "url": "https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083"}], "sourceIdentifier": "hp-security-alert@hp.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "hp-security-alert@hp.com", "type": "Secondary"}]}