Grandstream

    Dashboard / Vendors

    Products: 113
    Vulnerabilities: 57
    Known Exploited: 1
    13
    Critical Level Threats
    32
    High Level Threats
    10
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-2329

    Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow

    Last Modified: Apr 17, 2026
    Published: Feb 18, 2026

    CVE-2025-14186

    Grandstream GXP1625 Network Status api.values.post cross site scripting

    Last Modified: Apr 15, 2026
    Published: Dec 07, 2025

    CVE-2025-40979

    DLL search order hijack in Wave by Grandstream Networks

    Last Modified: Apr 15, 2026
    Published: Sep 10, 2025

    CVE-2025-28171

    An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /cgi and /webrtccgi.

    Last Modified: Aug 06, 2025
    Published: Jul 29, 2025

    CVE-2025-28170

    Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and files.

    Last Modified: Aug 06, 2025
    Published: Jul 29, 2025
    Items Per Page
    Grandstream Vulnerabilities & Security CVEs | CVE-DB