How many Grandstream gxp1620 firmware CVEs are in CISA KEV?

None of Grandstream gxp1620 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Grandstream gxp1620 firmware are affected?

6 distinct Grandstream gxp1620 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Grandstream gxp1620 firmware CVEs?

Grandstream gxp1620 firmware's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-250 (Execution with Unnecessary Privileges), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical Grandstream gxp1620 firmware vulnerabilities are there?

Grandstream gxp1620 firmware has 3 critical and 3 high-severity CVEs.

What is the average severity of Grandstream gxp1620 firmware CVEs?

The average CVSS base score across Grandstream gxp1620 firmware's scored CVEs is 8.7.

RadicalNotion.AI

Log in Start free

Grandstream

7 CVEs

Grandstream gxp1620 firmware Vulnerabilities

Name: Grandstream gxp1620 firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for gxp1620 firmware by Grandstream.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

8.7

Avg CVSS

2019–2026

Last updated February 18, 2026

Overview

Grandstream gxp1620 firmware has 7 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 8.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Grandstream gxp1620 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include gxp1620.

Severity and exploitation

How the CVSS severity of Grandstream gxp1620 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High3

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Grandstream gxp1620 firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of Grandstream gxp1620 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Grandstream gxp1620 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.0.4.128 <= v <= 1.0.4.1283 CVEs
<= 1.0.4.1522 CVEs
< 1.0.7.811 CVE
<= 1.0.7.131 CVE

Fixed in

> 1.0.7.131 CVE
1.0.7.811 CVE

Find a version

7 CVEs

Sort

Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow
CVE-2026-2329
Public exploit
Patch
CWE-121
Critical · CVSS 9.3
EPSS 40.0% (99th pct)2026-02-18
High vulnerability · 2024-03-09
CVE-2023-50015
Public exploit
Patch
CWE-250
High · CVSS 8.8
EPSS 0.4% (32th pct)2024-03-09
High vulnerability · 2020-04-14
CVE-2020-5739CWE-94
High · CVSS 8.8
EPSS 5.3% (92th pct)2020-04-14
High vulnerability · 2020-04-14
CVE-2020-5738CWE-59
High · CVSS 8.8
EPSS 5.4% (92th pct)2020-04-14
Critical vulnerability · 2019-04-01
CVE-2018-17565
Critical · CVSS 9.8
EPSS 1.9% (79th pct)2019-04-01
Critical vulnerability · 2019-04-01
CVE-2018-17564
Critical · CVSS 9.8
EPSS 1.6% (74th pct)2019-04-01
Medium vulnerability · 2019-04-01
CVE-2018-17563
Medium · CVSS 5.3
EPSS 0.7% (51th pct)2019-04-01

Common weakness types

The CWE weakness categories most often found in Grandstream gxp1620 firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Grandstream gxp1620 firmware CVEs were published each year.

2019

3

2020

2

2024

1

2026

1

Other Grandstream products

Browse vulnerabilities for other products by Grandstream.

ucm6204 firmware10 CVEs ucm62049 CVEs gxp1628 firmware8 CVEs ucm62028 CVEs ucm6202 firmware8 CVEs ucm6208 firmware8 CVEs gxp1610 firmware7 CVEs gxp1615 firmware7 CVEs

All Grandstream vulnerabilities

Frequently asked questions

Common questions about Grandstream gxp1620 firmware vulnerabilities.

How many CVEs does Grandstream gxp1620 firmware have?: Grandstream gxp1620 firmware has 7 published CVE records since 2019.
How many Grandstream gxp1620 firmware CVEs are in CISA KEV?: None of Grandstream gxp1620 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Grandstream gxp1620 firmware vulnerabilities?: Yes — 2 of Grandstream gxp1620 firmware's CVEs have a known public exploit.
Which versions of Grandstream gxp1620 firmware are affected?: 6 distinct Grandstream gxp1620 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Grandstream gxp1620 firmware CVEs?: Grandstream gxp1620 firmware's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-250 (Execution with Unnecessary Privileges), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical Grandstream gxp1620 firmware vulnerabilities are there?: Grandstream gxp1620 firmware has 3 critical and 3 high-severity CVEs.
What is the average severity of Grandstream gxp1620 firmware CVEs?: The average CVSS base score across Grandstream gxp1620 firmware's scored CVEs is 8.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Grandstream gxp1620 firmware vulnerabilities

Monitor new Grandstream gxp1620 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing