CVE-2026-2329 allows unauthenticated root-level access to SMB phone infrastructure, so attackers can intercept calls, commit toll fraud, and impersonate users.
First seen on darkreading.com
Jump to article: www.darkreading.com/threat-intelligence/grandstream-bug-voip-security-blind-spot
