Grandstream products not affected by PHP2Shell vulnerabilities

Following recent concerns about the critical PHP2Shell vulnerabilities, Grandstream has reviewed its product portfolio and cloud services and confirmed that its products and services are not affected.

According to Grandstream, none of its hardware, firmware, software applications, or cloud solutions use PHP. Grandstream products and services are therefore not affected, and no action is required for your Grandstream deployments.

Grandstream will update its statement if new information becomes available. For questions, contact Grandstream’s security team at psirt@grandstream.com.