HP Inc Poly Trio c60 vulnerabilities

2 CVEs affecting HP Inc Poly Trio c60, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5923, published 2026-07-08.

More from HP Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-5922, published 2026-07-08. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage.
• CVE-2026-5923, published 2026-07-08. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage.