CyberSecBulletin

Grandstream Networks vulnerabilities

We track 1 vulnerability in Grandstream Networks products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2025.

1vulnerabilities
0critical
1high
0exploited
7.0average CVSS score

Latest Grandstream Networks vulnerabilities

  • 7.0 High severity

    Wave: Uncontrolled Search Path Element

    CVE-2025-40979Grandstream Networks

    DLL search order hijacking vulnerability in the wave.exe executable for Windows 11, version 1.27.8. Exploitation of this vulnerability could allow attackers with local access to execute arbitrary code by placing an arbitrary file in the 'C:\Users<user>\AppData