g
grandstream
Security Risk Profile
37
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 59 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 10, 2005 to present
59
Total CVEs
47
Critical+High
3
Exploited
42
Unpatched
Threat Assessment
Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
42
Critical/High
Risk Level
37/100
low
⚠️ 3 Active Exploits🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
23High
24Medium
12Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
OS Command Injection
14
2
SQL Injection
7
3
Command Injection
6
4
Buffer Overflow
4
5
CSRF
4
Most Affected Products
1. Grandstream Gxv Device Firmware26
2. Grandstream Ucm6204 Firmware13
3. Grandstream Ucm6202 Firmware11
4. Grandstream Ucm6208 Firmware11
5. Grandstream Gxp1628 Firmware9
Recent Vulnerabilities
See more →CVE-2026-93338
CVSS 5.3medium
Grandstream GWN7660ELR < 1.0.27.6 Information Disclosure via SNMP Default Community String
Sep 18, 2026🔧 No Patch
CVE-2026-2329
CVSS 9.8critical
Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow
Feb 18, 2026
CVE-2025-14186
CVSS 5.1medium
Grandstream GXP1625 Network Status api.values.post cross site scripting
Dec 7, 2025🔧 No Patch
CVE-2025-28172
CVSS 6.5medium
Jul 29, 2025🔧 No Patch
CVE-2025-28171
CVSS 6.5medium
Jul 29, 2025🔧 No Patch
CVE-2025-28170
CVSS 7.6high
Jul 29, 2025🔧 No Patch
CVE-2024-32937
CVSS 9.8critical
Jul 3, 2024🔧 No Patch
CVE-2024-0840
CVSS 8.8high
Grandstream UCM Series IP PBX HTTP Parameter Injection
Apr 29, 2024
CVE-2023-50015
CVSS 8.8high
Mar 9, 2024🔧 No Patch
CVE-2022-2070
CVSS 9.8critical
Grandstream GSD3710 Stack-based Buffer Overflow
Sep 23, 2022⚠ Exploited
Monitor grandstream in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.