RWROOMWATCHby BushTek 21 Oct 2026
SIGNAL EVIDENCE LEDGER

Signals.

Every material announcement, advisory, release and lifecycle change appears once, with one stable link and its supporting evidence.

Rooms & AV#2026-07-28-hp-poly-polyos-tcos-ccx-and-trio-c60
HP / PolySecurityHighPatch to fixed minimum versions

HP fixes high-severity Android privilege escalation across Poly devices

PolyOS, TCOS, CCX and Trio C60

HP says a local attacker already able to execute code could exploit CVE-2025-48543 to escalate privileges. Fixed minimums are PolyOS 4.7.0, TCOS 6.7.0, CCX 9.4.0 and Trio C60 9.4.0.

Why it matters

This is not an unauthenticated remote takeover, but it can turn an initial device compromise into full control. Fleet owners should verify versions in Poly Lens and prioritize shared or physically exposed devices.

Direct endpoint exposure for enterprise and government Poly fleets
Vendor context →Related solutions →HP security bulletin ↗
Rooms & AV#2026-07-27-hp-poly-poly-privateconnect-powered-by-pexip
HP / PolySecurityCriticalImmediate version verification and remediation

Critical unauthenticated remote-code-execution flaw affects Poly PrivateConnect

Poly PrivateConnect powered by Pexip

HP rates the network-reachable flaw CVSS 9.8 and says it requires no privileges or user interaction. Pexip-backed PrivateConnect deployments should move to fixed releases 38.2, 39.2, 40.1 or 41.

Why it matters

This is a collaboration-infrastructure compromise path, not a room-appliance bug. Self-hosted and high-assurance estates should treat version verification as an immediate security action and confirm whether the service is externally reachable.

Immediate for government and regulated enterprises running PrivateConnect; irrelevant to estates that do not
Vendor context →Related solutions →HP security bulletin ↗
Rooms & AV#2026-06-17-hp-poly-poly-studio-room-compute-videoos-5-1
HP / PolyProductHighCompute shipping; certifications and VideoOS 5.1 pending

HP refreshes room compute around Intel Core Ultra and integrated NPUs

Poly Studio Room Compute & VideoOS 5.1

HP's Windows room compute became available through select resellers in July. Studio 7 is Zoom-certified while Microsoft Teams certification remains pending; Studio 5 Teams certification is also planned. VideoOS 5.1 remains expected in Q3 2026.

Why it matters

NPUs in room compute are becoming a lifecycle hedge for future local AI features. The practical test is whether new AI capabilities reduce support load without shortening certified hardware life.

Strong fit for standardized enterprise fleets; validate certification and sovereign-cloud support
Vendor context →Related solutions →HP newsroom ↗