Follow the latest coverage, related explainers and connected technology stories.
The CVE-2026-75501 vulnerability in Calix GS7 XGS routers allows remote, unauthenticated attackers to create port-forwarding rules through the exposed UPnP interface, potentially exposing cameras, NAS devices, and management interfaces to the internet. No patch was available at the time of publication, and CERT/CC recommends disabling UPnP or requesting that the service provider do so.