Administrator Authentication Flaw in HP Poly EagleEye Cube USB Device
CVE-2026-39430
Currently unrated
What is CVE-2026-39430?
The HP Poly EagleEye Cube USB device suffers from a serious flaw in its administrator authentication flow, where essential session management and access controls are not enforced at the device level. This oversight allows unauthenticated users to illicitly modify administrator settings. By utilizing a customized client or manipulating standard client requests, attackers can bypass the login process entirely, enabling them to perform administrative actions freely. This includes exporting sensitive configuration files that might expose internal device credentials and critical information related to other networked systems, raising significant security concerns for users.