Grandstream Gxp1600 Series VoIP Phones — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
February 18, 2026
Last Seen
February 19, 2026

Grandstream Gxp1600 Series VoIP Phones is a technology platform tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed February 18, 2026; most recent activity February 19, 2026.

Related Threat Clusters

  • Critical CVE-2026-2329 Vulnerability in Grandstream VoIP Phones

    A critical vulnerability, CVE-2026-2329, has been identified in the Grandstream GXP1600 series VoIP phones, allowing unauthenticated remote code execution with root privileges. This flaw affects small and midsized…

    18 articles · Updated February 18, 2026

Recent Intelligence Reports

  • Flaw in Grandstream VoIP phones allows stealthy eavesdropping — Bleepingcomputer · February 19, 2026
  • Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot — Darkreading · February 18, 2026
  • CVE-2026-2329: Critical Unauthenticated Stack Buffer Overflow in Grandstream GXP1600 ... — Rapid7 · February 18, 2026

Related Entities

Zero-day Exploit Cequence Security Grandstream Grandstream Networks Rapid7 Rapid7 Labs CVE-2026-2329 T1003 - OS Credential Dumping T1059 - Command and Scripting Interpreter T1071 - Application Layer Protocol T1190 - Exploit Public-Facing Application Gxp1610

CVSS v3.1 Breakdown