Critical Unauthenticated Root Vulnerability in Grandstream GXP1600 VoIP Phones

#cybersecurity #infosec

Summary

Grandstream GXP1600 series VoIP phones contain a critical unauthenticated buffer overflow vulnerability (CVE-2026-2329) that allows attackers to gain root access and intercept calls.

Take Action:

If you are using Grandstream GXP1600 phones, plan a quick update to firmware 1.0.7.81. As a first step, make sure to isolate VoIP hardware on a dedicated, firewalled VLAN and confirm that management interfaces are not reachable from untrusted networks.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines