Malicious Cookie Use in IP Phone Webpage

Publication date: 2026-07-08

Last updated on: 2026-07-08

Assigner: HP Inc.

Description

Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-08

Last Modified

2026-07-08

Generated

2026-07-09

AI Q&A

2026-07-09

EPSS Evaluated

N/A

NVD

CVE-2026-5923

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-352	The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability involves the malicious use of a stolen cookie which might allow an attacker to modify the contents of an IP phone's webpage.

Impact Analysis

If exploited, this vulnerability could allow an attacker to alter the content displayed on the IP phone's webpage, potentially leading to unauthorized changes or misleading information being presented to users.

Hi! I’m here to help you understand CVE-2026-5923. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70