Vulnerabilities in Grandstream
6 resultsCVE-2026-2329CRITICALGrandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflowEPSS 40.0%CVE-2024-32937HIGHAn os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1EPSS 26.3%CVE-2022-2070CRITICALGrandstream GSD3710 Stack-based Buffer OverflowEPSS 4.3%CVE-2022-2025CRITICALGrandstream GSD3710 Stack-based Buffer OverflowEPSS 4.0%CVE-2024-0840HIGHGrandstream UCM Series IP PBX HTTP Parameter InjectionEPSS 0.9%CVE-2025-14186MEDIUMGrandstream GXP1625 Network Status api.values.post cross site scriptingEPSS 0.2%