{"uuid": "b2d35db0-61f2-49e3-b300-2a98ccc1ccd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2329", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/grandstream_gxp1600_unauth_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint\\n          /cgi-bin/api.values.get. A remote attacker can leverage this vulnerability to achieve unauthenticated remote\\n          code execution (RCE) with root privileges on a target device. The vulnerability affects all six device models\\n          in the series: GXP1610, GXP1615, GXP1620, GXP1625, GXP1628, and GXP1630. The vulnerability affects all\\n          firmware versions below version 1.0.7.81.\", \"disclosure_date\": \"2026-02-18\", \"fullname\": \"exploit/linux/http/grandstream_gxp1600_unauth_rce\", \"is_install_path\": true, \"mod_time\": \"2026-08-05 09:07:36 +0000\", \"name\": \"GrandStream GXP1600 Unauthenticated Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"RelatedModules\": [\"post/linux/gather/grandstream_gxp1600_creds\", \"post/linux/capture/grandstream_gxp1600_sip\"], \"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-service-restarts\"]}, \"path\": \"/modules/exploits/linux/http/grandstream_gxp1600_unauth_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/http/grandstream_gxp1600_unauth_rce\", \"references\": [\"CVE-2026-2329\", \"URL-https://www.rapid7.com/blog/post/ve-cve-2026-2329-critical-unauthenticated-stack-buffer-overflow-in-grandstream-gxp1600-voip-phones-fixed\", \"URL-https://psirt.grandstream.com/\", \"URL-https://firmware.grandstream.com/Release_Note_GXP16xx_1.0.7.81.pdf\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:36.820431Z"}