How many Grandstream gxp1628 firmware CVEs are in CISA KEV?

None of Grandstream gxp1628 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Grandstream gxp1628 firmware are affected?

7 distinct Grandstream gxp1628 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Grandstream gxp1628 firmware CVEs?

Grandstream gxp1628 firmware's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-250 (Execution with Unnecessary Privileges), CWE-548 (Exposure of Information Through Directory Listing), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).

How many critical Grandstream gxp1628 firmware vulnerabilities are there?

Grandstream gxp1628 firmware has 3 critical and 4 high-severity CVEs.

What is the average severity of Grandstream gxp1628 firmware CVEs?

The average CVSS base score across Grandstream gxp1628 firmware's scored CVEs is 8.5.

RadicalNotion.AI

Log in Start free

Grandstream

8 CVEs

Grandstream gxp1628 firmware Vulnerabilities

Name: Grandstream gxp1628 firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for gxp1628 firmware by Grandstream.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

8.5

Avg CVSS

2019–2026

Last updated February 18, 2026

Overview

Grandstream gxp1628 firmware has 8 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 8.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Grandstream gxp1628 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include gxp1628.

Severity and exploitation

How the CVSS severity of Grandstream gxp1628 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High4

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Grandstream gxp1628 firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of Grandstream gxp1628 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Grandstream gxp1628 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.0.4.128 <= v <= 1.0.4.1283 CVEs
<= 1.0.4.1522 CVEs
< 1.0.7.811 CVE
<= 1.0.4.1301 CVE
<= 1.0.7.131 CVE

Fixed in

> 1.0.7.131 CVE
1.0.7.811 CVE

Find a version

8 CVEs

Sort

Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow
CVE-2026-2329
Public exploit
Patch
CWE-121
Critical · CVSS 9.3
EPSS 40.0% (99th pct)2026-02-18
High vulnerability · 2025-07-29
CVE-2025-28170
Public exploit
CWE-548
High · CVSS 7.6
EPSS 0.3% (22th pct)2025-07-29
High vulnerability · 2024-03-09
CVE-2023-50015
Public exploit
Patch
CWE-250
High · CVSS 8.8
EPSS 0.4% (32th pct)2024-03-09
High vulnerability · 2020-04-14
CVE-2020-5739CWE-94
High · CVSS 8.8
EPSS 5.3% (92th pct)2020-04-14
High vulnerability · 2020-04-14
CVE-2020-5738CWE-59
High · CVSS 8.8
EPSS 5.4% (92th pct)2020-04-14
Critical vulnerability · 2019-04-01
CVE-2018-17565
Critical · CVSS 9.8
EPSS 1.9% (79th pct)2019-04-01
Critical vulnerability · 2019-04-01
CVE-2018-17564
Critical · CVSS 9.8
EPSS 1.6% (74th pct)2019-04-01
Medium vulnerability · 2019-04-01
CVE-2018-17563
Medium · CVSS 5.3
EPSS 0.7% (51th pct)2019-04-01

Common weakness types

The CWE weakness categories most often found in Grandstream gxp1628 firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Grandstream gxp1628 firmware CVEs were published each year.

2019

3

2020

2

2024

1

2025

1

2026

1

Other Grandstream products

Browse vulnerabilities for other products by Grandstream.

ucm6204 firmware10 CVEs ucm62049 CVEs ucm62028 CVEs ucm6202 firmware8 CVEs ucm6208 firmware8 CVEs gxp1610 firmware7 CVEs gxp1615 firmware7 CVEs gxp1620 firmware7 CVEs

All Grandstream vulnerabilities

Frequently asked questions

Common questions about Grandstream gxp1628 firmware vulnerabilities.

How many CVEs does Grandstream gxp1628 firmware have?: Grandstream gxp1628 firmware has 8 published CVE records since 2019.
How many Grandstream gxp1628 firmware CVEs are in CISA KEV?: None of Grandstream gxp1628 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Grandstream gxp1628 firmware vulnerabilities?: Yes — 3 of Grandstream gxp1628 firmware's CVEs have a known public exploit.
Which versions of Grandstream gxp1628 firmware are affected?: 7 distinct Grandstream gxp1628 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Grandstream gxp1628 firmware CVEs?: Grandstream gxp1628 firmware's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-250 (Execution with Unnecessary Privileges), CWE-548 (Exposure of Information Through Directory Listing), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).
How many critical Grandstream gxp1628 firmware vulnerabilities are there?: Grandstream gxp1628 firmware has 3 critical and 4 high-severity CVEs.
What is the average severity of Grandstream gxp1628 firmware CVEs?: The average CVSS base score across Grandstream gxp1628 firmware's scored CVEs is 8.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Grandstream gxp1628 firmware vulnerabilities

Monitor new Grandstream gxp1628 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing