CSRF in HP Inc. Poly Ccx

CVE-2026-5923

Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.001 (3.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References