Resource exhaustion in HP Inc Ccx

CVE-2026-2891

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.003 (16.8th percentile) — read the EPSS interpretation.