CVE-2026-75501

Unpatched Vulnerability in Calix Routers Enables NAT Bypass and Exposure of Internal Network Devices

The CVE-2026-75501 vulnerability in Calix GS7 XGS routers allows remote, unauthenticated attackers to create port-forwarding rules through the exposed UPnP interface, potentially exposing cameras, NAS devices, and management interfaces to the internet. No patch was available at the time of publication, and CERT/CC recommends disabling UPnP or requesting that the service provider do so.