Embedded Test Key Vulnerability in Poly Voice Devices

CVE-2026-0754

What is CVE-2026-0754?

An embedded test key and certificate vulnerability allows attackers to potentially extract sensitive information from Poly Voice devices using advanced reverse engineering techniques. If the extracted certificate is accepted by a SIP service provider without thorough validation, it could lead to unauthorized access and exploitation of communication channels, thereby posing significant security risks.

References