Edge E vulnerabilities

2 known vulnerabilities in Edge E from HP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  CCX: Uncontrolled Resource Consumption

  CVE-2026-2891Jul 1, 2026HP

  The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities.

• 8.2 High severity

  VVX: Use of Hard-coded Cryptographic Key

  CVE-2026-0754Mar 3, 2026HP

  An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of t