If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews
← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 21, 2026 · 14:44via CERT/CC Vulnerability Notes

VU#756733: Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability

Brief

Overview

The Calix GS7 XGS GS5239XG router running firmware EXOS/6.

  • 47 contains a missing authentication vulnerability that exposes its UPnP (Universal Plug and Play) WANIPConnection service on the public WAN interface.

Description

Calix GS7 XGS GS5239XG is a residential gateway that provides routing, NAT, and firewall functionality for home networks. The device includes the Universal Plug and Play (UPnP) service implemented via MiniUPnPd 2.

  • 7, a lightweight software program that provides features such as automatic port forwarding for applications and devices on the LAN.

By default, the UPnP service is exposed on the device’s WAN interface and does not require authentication.

CVE-2026-75501 In affected firmware versions, the router binds its UPnP WANIPConnection SOAP service to the public WAN interface on TCP port 5000.

Read more on CERT/CC Vulnerability Notes→
Vulnerabilities & PatchesVendors & MarketCVE-2026-75501