Poly — Vulnerabilities & Security Advisories 8

Poly is a video conferencing and communication platform primarily used for business meetings and remote collaboration. Historically, it has been susceptible to multiple remote code execution, cross-site scripting, and privilege escalation vulnerabilities, with 8 CVEs documented. Security researchers have identified authentication bypass flaws and insecure default configurations as recurring issues. In 2022, a critical RCE vulnerability (CVE-2022-24112) allowed unauthenticated attackers to execute arbitrary code on affected systems. The platform's complex attack surface and frequent updates contribute to ongoing security challenges, requiring organizations to maintain rigorous patch management and network segmentation to mitigate potential exploitation risks.