CVE Catalog

CVE-2026-0826

CriticalCVSS 9.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
24.47%

98th percentile - higher than 98% of all known CVEs

Summary

In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform.

Risk Assessment

An attacker could remotely take control of the Poly Voice device, leading to call eavesdropping and communication confidentiality breaches.

Recommendation

Disable ICE if not required, and apply security patches from Poly.

Original NVD description (English source)

In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS