Description
Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and files.
High · 7.6
CVE-2025-28170
EUVD-2025-23024GHSA-7wqx-pvjm-73q6
Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled…
Published Jul 29, 2025 · Updated Jul 5, 2026 · Assigned by mitre