• CVE-2026-2329 allows unauthenticated root-level access to SMB phone infrastructure, so attackers can intercept calls, commit toll fraud, and impersonate users.

Article Summaries:

  • Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot

A newly disclosed vulnerability (CVE‑2026‑2329) in Grandstream’s VoIP phone systems allows attackers to gain unauthenticated root‑level access to the devices’ infrastructure. The flaw enables interception of calls, execution of toll‑fraud schemes, and impersonation of legitimate users. Because many small and medium‑sized businesses rely on Grandstream hardware for voice communications, the bug exposes a significant security gap in SMB environments. Security teams are urged to apply vendor patches immediately and review network segmentation to mitigate the risk of widespread call‑intercept and fraud attacks.

Sources: