CVE-2026-5922

5.9 mediumEPSS 0.4%

Medium (5.9). EPSS 0.4% chance of exploitation in the next 30 days.

The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage.

Severity

5.9 medium

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-07-08
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19