Skip to content

CyberSIXT Search

Vendor

Grandstream

No CISA KEV deadline is open. CISA last added a Grandstream CVE on 28 Jan 2022.

Tracked since 18 Feb · latest article Mon 23 Feb · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 1 all time
High exploit odds: 1; ≥ p95, not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2020-5722not in CyberSIXT coverageUCM620028 Jan 2022Deadline passed 28 Jul 2022Ransomware: Unknown · 0 articles

Products

2 products · 1 CVEs in coverage

UCM62000 CVEs · 1 in KEV GXP16101 CVEs · 0 in KEVlatest 23 Feb

Coverage

3 articles · all timeFull timeline →

Three articles so far, 18 Feb to 23 Feb.

Wed 18 Feb · first reportGrandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code ExecutionThe Hacker News
Wed 18 FebCritical Grandstream VoIP Bug Highlights SMB Security Blind SpotDark Reading
Mon 23 FebCVE-2026-2329 lets attackers hijack Grandstream GXP1600 callsSecurityWeek

See the full timeline

23 FebCVE-2026-2329 lets attackers hijack Grandstream GXP1600 callsSecurityWeek
18 FebCritical Grandstream VoIP Bug Highlights SMB Security Blind SpotDark Reading
18 FebGrandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code ExecutionThe Hacker News

All CVEs in coverage

1

CVE-2026-2329Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflowCVSSUnrated–Not in KEV42%EPSS3articles

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

High exploit odds means FIRST EPSS percentile ≥ 95, excluding entries in CISA KEV.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.