# Unpatched Calix router flaw can expose devices through NAT

_Monday, August 24, 2026 at 5:14 PM EDT · Security · Developing · Tier 1 — Major_

![Unpatched Calix router flaw can expose devices through NAT — Primary](https://www.bleepstatic.com/content/hl-images/2026/08/24/Calix.jpg)

A missing-authentication flaw in Calix GS7 XGS routers can let remote attackers create port-forwarding rules and expose local devices to the public internet, according to a researcher and CERT/CC. The issue, CVE-2026-75501, affects devices running EXOS/6.6.47 firmware and exposes a MiniUPnPd control endpoint on WAN port 5000. The source says no patch is available; it recommends disabling UPnP where possible.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/unpatched-calix-flaw-lets-hackers-bypass-nat-to-expose-internal-devices/)

---
Canonical: https://techandbusiness.org/newswire/Qt8Uthu8DgaCYaPj-8SvLZ
Retrieved: 2026-08-25T01:02:16.520Z
Publisher: Tech & Business (techandbusiness.org)