VULNERABILITY INTELLIGENCE
CVE-2026-0754
CVSS score8.2 HIGH
EPSS probability0.10%
CISA KEVNot currently listed
Published2026-03-03
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N
Description
An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate.
Weakness classification
- CWE-321: Use of Hard-coded Cryptographic Key