Critical Remote Code Execution Flaw Found in Grandstream GXP1600 VoIP Phones

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE-2026-2329 Vulnerability in Grandstream VoIP Phones A critical vulnerability, CVE-2026-2329, has been identified in the Grandstream GXP1600 series VoIP phones, allowing unauthenticated remote code execution with root privileges. This flaw affects small and midsized businesses, hotels, and call centers, enabling attackers to intercept calls and commit toll fraud. A firmware update is available to remediate the issue. 18 sources 52