CVE-2026-2329

An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. A remote attacker can leverage this vulnerability to achieve unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability affects all six device models in the series: GXP1610, GXP1615, GXP1620, GXP1625, GXP1628, and GXP1630.

Scoring

Severity

CRITICAL

CVSS base score

9.3

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS probability

40.01%

CWE

CWE-121

Published

2026-02-18

Last modified

2026-03-12

Affected products

• Grandstream GXP1610
• Grandstream GXP1615
• Grandstream GXP1620
• Grandstream GXP1625
• Grandstream GXP1628
• Grandstream GXP1630

Weakness type

• CWE-121

Related vulnerabilities

• CVE-2026-82079 — Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack
• CVE-2026-85384 — Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
• CVE-2026-83990 — Microsoft Graphics Component Elevation of Privilege Vulnerability
• CVE-2026-81953 — Microsoft Excel Remote Code Execution Vulnerability
• CVE-2026-81388 — Microsoft Excel Remote Code Execution Vulnerability
• CVE-2026-81396 — Microsoft Excel Remote Code Execution Vulnerability
• CVE-2026-73006 — DirectWrite Remote Code Execution Vulnerability
• CVE-2026-69614 — Microsoft Office Access Remote Code Execution Vulnerability

Markdown version · Browse all CVEs