Poly Clariti Manager – May 2026 Security Update

Multiple potential security vulnerabilities have been identified on Poly Clariti Manager, on-premises management platform. These vulnerabilities are related to Berkeley Internet Name Domain BIND, which is an open-source protocol. HP has released updates to mitigate the potential vulnerabilities. ...

CVE-2024-41912

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls...

CVE-2024-41913

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize User input...

EUVD-2024-39267

Malicious code in bioql PyPI...

EUVD-2025-22394

Malicious code in bioql PyPI...

EUVD-2024-39269

Malicious code in bioql PyPI...

EUVD-2025-22386

Malicious code in bioql PyPI...

EUVD-2025-22389

Malicious code in bioql PyPI...

EUVD-2025-22392

Malicious code in bioql PyPI...

EUVD-2025-22387

Malicious code in bioql PyPI...

EUVD-2025-22393

Malicious code in bioql PyPI...

EUVD-2025-22395

Malicious code in bioql PyPI...

EUVD-2025-22390

Malicious code in bioql PyPI...

EUVD-2025-22391

Malicious code in bioql PyPI...

EUVD-2025-22397

Malicious code in bioql PyPI...

CVE-2025-43489

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could deserialize untrusted data without validation. HP has addressed the issue in the latest software update...

CVE-2025-43487

A potential privilege escalation through Sudo vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The firmware flaw does not properly implement access controls. HP has addressed the issue in the latest software update...

CVE-2025-43022

A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow a privileged user to execute SQL commands. HP has addressed the issue in the latest software update...

CVE-2025-43485

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could potentially allow a privileged user to retrieve credentials from the log files. HP has addressed the issue in the latest software update...

CVE-2025-43483

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the retrieval of hardcoded cryptographic keys. HP has addressed the issue in the latest software update...