Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Grandstream vulnerabilities

6 published CVEs name Grandstream among the affected products.

Newest CVEs

  • CVE-2026-2329

    Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow

    Grandstream · GXP1610

    Critical9.3
  • CVE-2025-14186

    Grandstream GXP1625 Network Status api.values.post cross site scripting

    Grandstream · GXP1625

    Medium5.1
  • CVE-2024-32937

    An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1.0.11.79. A…

    Grandstream · GXP2135

    High8.1
  • CVE-2024-0840

    Grandstream UCM Series IP PBX HTTP Parameter Injection

    Grandstream · UCM Series

    High8.8
  • CVE-2022-2070

    Grandstream GSD3710 Stack-based Buffer Overflow

    Grandstream · Grandstream GSD3710

    Critical9.8
  • CVE-2022-2025

    Grandstream GSD3710 Stack-based Buffer Overflow

    Grandstream · Grandstream GSD3710

    Critical9.8