CVE-2026-2329 2

Vulnerability (CVE)

Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution

Rapid7 researchers disclosed CVE-2026-2329, a stack-based buffer overflow in the Grandstream GXP1600 series VoIP phones' web API endpoint /cgi-bin/api.values.get, rated CVSS 9.3 and exploitable without authentication in the default configuration. The flaw,...

Vulnerabilities & Patching

⚡ Weekly Recap: Double-Tap Skimmers, Prompt Spy AI, 30Tbps DDoS, Docker Malware & More

Cyber Risks The Hacker News

A maximum-severity hard-coded credential flaw in Dell RecoverPoint for Virtual Machines, CVE-2026-22769 with a CVSS score of 10.0, has been exploited as a zero-day since mid-2024 by a suspected China-nexus cluster tracked as UNC6201. Attackers used an...

Vulnerabilities & Patching