> TritonInfoSec News
Home / Aug 25, 2026 / Story
0
#10 BleepingComputer general August 24, 2026 at 21:14 UTC

Unpatched Calix flaw lets hackers bypass NAT to expose internal devices

By Bill Toulas

AI Summary

An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers — deployed by multiple U.S. broadband ISPs — allows remote unauthenticated attackers to create arbitrary port-forwarding rules, effectively bypassing NAT and exposing internal network devices directly to the public internet. With no patch currently available, ISPs and their subscribers face persistent exposure, and the scope across multiple broadband providers amplifies the potential attack surface.

Read full article → https://www.bleepingcomputer.com/news/security/unp…

Relevance score: 72.0/100

# More from August 25

  1. 1
    Iran-Linked Hackers Shut Down UK Power Plant for Four Days SecurityWeek
  2. 2
    Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account The Hacker News
  3. 3
    CISA orders urgent patching of actively exploited Zimbra flaw BleepingComputer
  4. 4
    Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts SecurityWeek
  5. 5
    91 Vulnerabilities Patched in Spring Application Framework SecurityWeek
  6. 6
    TikTok Reaches $400 Million Settlement With US Justice Department Over Children’s Privacy SecurityWeek
  7. 7
    UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit The Hacker News
  8. 8
    Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor The Hacker News
  9. 9
    Hackers target WordPress sites in miniOrange auth bypass attacks BleepingComputer