68 matches found
CVE-2026-19745
소개 안녕하세요 여러분, 지난 5월에 제 라우터에서 괜찮은 취약점들을 발견했는데, 드디어 오늘 모두에게 공개할 수 있게 되었습니다! 이 저장소에 있는 두 취약점 모두 인증된 서비스 거부Denial of Service 취약점입니다! 이 취약점들이 어떻게, 왜 발생하는지에 대한 정확한 기술적 세부 사항은 알지 못합니다. Calix이 경우 벤더로부터 답변을 받지 못했거든요. 그래서 어쨌든 재밌네요! 이건 제 첫 번째이자 두 번째 CVE이기도 합니다. 2개를 1개 가격에, 문제없죠. CVE-2026-19745 CVE-2026-1974...
CVE-2026-75501
Rejected reason: Vendor could not replicate the vul, and reporter is unavailable to comment...
CVE-2026-75501
...
CVE-2026-75501
The Calix GS7 XGS (GS5239XG) residential router running EXOS firmware 6.6.47 exposes its MiniUPnPd WANIPConnection service on the public WAN interface at TCP port 5000 without authentication. Unauthenticated remote attackers can send crafted SOAP requests to add, delete, or enumerate NAT port map...
EUVD-2026-63988
A vulnerability in the Calix EXOS firmware for the GS7 XGS GS5239XG residential router allows unauthenticated remote attackers to modify NAT port‑forwarding rules via the UPnP WANIPConnection service. The device exposes the MiniUPnPd control endpoint on the WAN interface on TCP port 5000 without...
PT-2026-79389
Name of the Vulnerable Software and Affected Versions Calix EXOS firmware version 6.6.47 Description An issue in the Calix EXOS firmware for the GS7 XGS GS5239XG residential router allows unauthenticated remote attackers to modify NAT port-forwarding rules. The device exposes the MiniUPnPd contro...
Retraction of "Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability"
Overview The Calix GS7 XGS GS5239XG router running firmware EXOS/6.6.47 contains a missing authentication vulnerability that exposes its UPnP Universal Plug and Play WANIPConnection service on the public WAN interface After further analysis of the case alongside the Calix security team, we have...
CVE-2026-19746
A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...
CVE-2026-19745
A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilitiesconfigurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploi...
CVE-2026-19746
A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...
EUVD-2026-58225
A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...
CVE-2026-19746
Calix GigaSpire 26.1.0 contains a vulnerability in the traceroute.cmd file where an unknown function can be manipulated to cause a denial of service. The issue can be triggered remotely, with public disclosure of the exploit. No remediation details are provided in the supplied documents. The vend...
CVE-2026-19746 Calix GigaSpire traceroute.cmd denial of service
A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...
CVE-2026-19746 Calix GigaSpire traceroute.cmd denial of service
A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...
CVE-2026-19745
A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilitiesconfigurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploi...
CVE-2026-19745 Calix GigaSpire Web Management utilities_configurationsave.cgi denial of service
A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilitiesconfigurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploi...
CVE-2026-19745
Technical details for CVE-2026-19745 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-19745 Calix GigaSpire Web Management utilities_configurationsave.cgi denial of service
A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilitiesconfigurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploi...
EUVD-2026-58241
A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilitiesconfigurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploi...