EUVD-2026-116924

On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows command injection. This allows attackers without administrator-level access to execute arbitrary commands on the device as root. This is due to insufficient inpu...