Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution

AI Summary

Critical vulnerability CVE-2026-2329 (CVSS 9.3) in Grandstream GXP1600 VoIP phones allows unauthenticated remote code execution via stack-based buffer overflow. The flaw enables attackers to seize complete control of affected business phone systems without authentication.

Read full article → https://thehackernews.com/2026/02/grandstream-gxp1…

Relevance score: 78.0/100

# More from February 21

1
FBI: $20 Million Losses Caused by 700 ATM Jackpotting Attacks in 2025 SecurityWeek
2
BeyondTrust Vulnerability Exploited in Ransomware Attacks SecurityWeek
3
Romanian hacker faces up to 7 years for breaching Oregon emergency management department The Record
4
Ukrainian National Sentenced to 5 Years in North Korea IT Worker Fraud Case The Hacker News
5
Former Google Engineers Indicted Over Trade Secret Transfers to Iran The Hacker News
6
PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence The Hacker News
7
Japanese tech giant Advantest hit by ransomware attack BleepingComputer
8
Attackers Use New Tool to Scan for React2Shell Exposure Dark Reading
9
CISA Adds Two Known Exploited Vulnerabilities to Catalog CISA Alerts