Critical Grandstream Phone Vulnerability Exposes Calls to Interception

By Eduard Kovacs

AI Summary

CVE-2026-2329, a critical vulnerability in Grandstream phones, allows unauthenticated remote code execution with root privileges and exposes calls to interception. This flaw poses significant risks to enterprise VoIP communications, as attackers can gain full system control and eavesdrop on sensitive conversations without any authentication requirements.

Read full article → https://www.securityweek.com/critical-grandstream-…

Relevance score: 90.0/100

# More from February 23

1
AI-Assisted Threat Actor Compromises 600+ FortiGate Devices in 55 Countries The Hacker News
2
Amazon: AI-assisted hacker breached 600 FortiGate firewalls in 5 weeks BleepingComputer
4
CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog The Hacker News
5
Predator spyware hooks iOS SpringBoard to hide mic, camera activity BleepingComputer
6
Arkanix Stealer pops up as short-lived AI info-stealer experiment BleepingComputer
7
Anthropic Launches Claude Code Security for AI-Powered Vulnerability Scanning The Hacker News
8
EC-Council Expands AI Certification Portfolio to Strengthen U.S. AI Workforce Readiness and Security The Hacker News
9
Major government research lab appears to be squeezing out foreign scientists Ars Technica Security
10
Study shows how rocket launches pollute the atmosphere Ars Technica Security