CVE-2026-75501

The Calix EXOS firmware for the GS7 XGS residential router is vulnerable due to the exposure of the MiniUPnPd control endpoint on the WAN interface, allowing unauthenticated remote attackers to manipulate NAT port-forwarding rules via crafted SOAP requests. This could lead to the bypassing of firewall protections, potentially exposing internal LAN services to the public internet. Organizations using this router model should prioritize addressing this vulnerability to safeguard their network infrastructure.