https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T21:47:27.581004+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-32937 CVE-2024-32937 2026-10-21T21:47:27.582319+00:00

Affected: Grandstream GXP2135, grandstream gxp2135_firmware

An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1.0.11.79. A specially crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of malicious packets to trigger this vulnerability.