VulnerabilityBleeping Computer
9.5 — CRITICAL
Unpatched Calix flaw lets hackers bypass NAT to expose internal devices
An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers used by multiple U.S. broadband providers allows remote, unauthenticated attackers to create port-forwarding rules that can expose local network devices to the public internet. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A previously unpatched vulnerability in the Calix GS7 XGS residential router allows remote attackers to bypass NAT and expose internal devices, posing a significant risk to users' network security.
⚙️Technical Details
CVEs
CVE-2026-75501
Affected Systems
Calix GS7 XGS (GS5239XG) residential routers
Attack Vectors
Unauthenticated remote attackers can create port-forwarding rulesDelete existing mappingsEnumerate the router's current mappingsRetrieve its public IP address
💥Impact Assessment
Severity: critical
Who Is at Risk
Users of vulnerable Calix GS7 XGS residential routersSeverity: critical
🛡️Recommended Actions
1Disable UPnP through the administrative interface
2Contact ISP to request deactivation if unable to change setting
3Apply a firewall rule to block incoming traffic on TCP port 5000
📦Affected Products
Calix GS7 XGS (GS5239XG) residential routers
🔐NVD Verified DataVERIFIED
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.