Latest / The Digital Warfare Podcast
EP. 150: This Router Flaw Can Expose Everything Behind Your Firewall
CVE-2026-75501 affects the Calix GS7 XGS GS5239XG residential gateway running affected EXOS 6.6.47 firmware. The router exposes its UPnP WANIPConnection SOAP service on the public WAN interface on TCP port 5000 without authentication.
A remote unauthenticated attacker can add, remove, enumerate, or query NAT port mappings. Creating arbitrary forwarding rules can bypass the protection normally provided by the router's NAT and firewall boundary and expose internal systems such as cameras, NAS devices, and other IoT equipment directly to the internet.
CERT/CC reported that it was unable to…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.