Back Thehackernews

VoIP Security — Latest News, Reports & Analysis

Thehackernews • February 19, 2026

"A remote attacker can leverage CVE-2026-2329 to achieve unauthenticated remote code execution ( RCE ) with root privileges on a target device," Rapid7 ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE-2026-2329 Vulnerability in Grandstream VoIP Phones A critical vulnerability, CVE-2026-2329, has been identified in the Grandstream GXP1600 series VoIP phones, allowing unauthenticated remote code execution with root privileges. This flaw affects small and midsized businesses, hotels, and call centers, enabling attackers to intercept calls and commit toll fraud. A firmware update is available to remediate the issue. 18 sources 52

Extracted Entities

Attack Types (1)

Remote Code Execution

CVEs (1)

CVE-2026-2329