A critical unauthenticated buffer overflow vulnerability, CVE-2026-0826, has been discovered in HP Poly VoIP phones, allowing for remote code execution with root privileges. The flaw resides in the phone's Session Description Protocol (SDP) parsing for ICE-enabled devices. This presents a significant risk to enterprises, as compromised phones can serve as entry points for further network exploitation and surveillance.
Read the full article at Security Affairs
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.
6
Ali NematiWritten by Ali
