Log in Start free

Grandstream

Products

ProductCVEsExploitedLatest
Grandstream GSD37102–Sep 23, 2022
GXP16252–Feb 18, 2026
GXP16151–Feb 18, 2026
GXP16201–Feb 18, 2026
UCM Series1–Apr 29, 2024
GXP16281–Feb 18, 2026
GXP16301–Feb 18, 2026
GXP21351–Jul 3, 2024
GXP16101–Feb 18, 2026

Exploited and recent CVEs

  • CVE-2026-2329 Critical 9.3 Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow 41.7%
  • CVE-2026-2329 Critical 9.3 Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow 41.7%
  • CVE-2026-2329 Critical 9.3 Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow 41.7%
  • CVE-2026-2329 Critical 9.3 Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow 41.7%
  • CVE-2026-2329 Critical 9.3 Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow 41.7%
  • CVE-2026-2329 Critical 9.3 Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow 41.7%
  • CVE-2025-14186 Low 3.5 Grandstream GXP1625 Network Status api.values.post cross site scripting 0.2%
  • CVE-2024-32937 High 8.1 An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1.0.11.79. A specially crafted network packet can lead to arb 27.0%
  • CVE-2024-0840 High 8.8 Grandstream UCM Series IP PBX HTTP Parameter Injection 0.9%
  • CVE-2022-2070 Critical 9.8 Grandstream GSD3710 Stack-based Buffer Overflow 5.8%
  • CVE-2022-2025 Critical 9.8 Grandstream GSD3710 Stack-based Buffer Overflow 5.5%