CVE-2026-2891: HP Inc Ccx

High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities.

Affected products

• HP Inc Ccx: before 9.50 (fixed in 9.50)
• HP Inc Edge E: before 8.6.0 (fixed in 8.6.0)
• HP Inc Trio c60: before 9.5.0 (fixed in 9.5.0)

Published 2026-07-01. Last modified 2026-07-02.