CVE-2026-2329

The CVE-2026-2329 entry describes an unauthenticated stack-based buffer overflow in Grandstream GXP series devices (GXP1610/1615/1620/1625/1628/1630) at the HTTP API endpoint /cgi-bin/api.values.get, enabling unauthenticated RCE with root privileges. Affected models are explicitly listed; attack ...