Grandstream vulnerabilities
6 published CVEs name Grandstream among the affected products.
- Published CVEs
- 6
- Last 12 months
- 2
- Critical
- 3
- Known exploited
- 0
Critical 3High 2Medium 1Low 0Not scored 0
CVEs per yearBy the year they were published
- 20222
- 20242
- 20251
- 20261
Newest CVEs
- CVE-2026-2329
Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow
Grandstream · GXP1610
Critical9.3 - CVE-2025-14186
Grandstream GXP1625 Network Status api.values.post cross site scripting
Grandstream · GXP1625
Medium5.1 - CVE-2024-32937
An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1.0.11.79. A…
Grandstream · GXP2135
High8.1 - CVE-2024-0840
Grandstream UCM Series IP PBX HTTP Parameter Injection
Grandstream · UCM Series
High8.8 - CVE-2022-2070
Grandstream GSD3710 Stack-based Buffer Overflow
Grandstream · Grandstream GSD3710
Critical9.8 - CVE-2022-2025
Grandstream GSD3710 Stack-based Buffer Overflow
Grandstream · Grandstream GSD3710
Critical9.8