Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2026-19746

Calix GigaSpire traceroute.cmd denial of service

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The presence of this vulnerability remains uncertain at this time. The vendor explains: "After reviewing the researcher's videos, we repeated the test using his described setup: the traceroute cancel request was sent while a second client was connected to the EWI. The second client remained connected and was not interrupted, and we did not observe a forced logout, session invalidation, or loss of EWI availability."

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Calix
Products
Gigaspire
CVE-2026-19745

Calix GigaSpire Web Management utilities_configurationsave.cgi denial of service

A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilities_configurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The existence of this vulnerability is still disputed at present. The vendor explains: "We reproduced the reported request pattern. The observed delay results from expected input-timeout handling while the handler waits for input data. We did not observe a backend crash, resource exhaustion, service instability, or loss of EWI availability, and the interface remained accessible during and after testing."

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Calix
Products
Gigaspire
CVE-2026-75501

Unauthenticated Remote Modification of NAT Port‑Forwarding via UPnP on Calix GS7 XGS Router

Vendor could not replicate the vul, and reporter is unavailable to comment.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
Calix
Products
Gs7 Xgs (gs5239xg)
CVE-2025-54084

Calix Gigacenter ONT - Command Injection

OS Command ('OS Command Injection') vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows authenticated attackers with 'super' user credentials to execute arbitrary OS commands through improper input validation, potentially leading to full system compromise.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Calix
Products
Gigacenter Ont
CVE-2025-53913

Calix GigaCenter ONT (Quantenna SoC) - Excessive Privileges

Excessive Privileges vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Calix
Products
Gigacenter Ont
CVE-2025-53914

Calix GigaCenter ONT (Broadcom SoC) - Excessive Privileges

Excessive Privileges vulnerability in Calix GigaCenter ONT (Broadcom SoC modules) allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Calix
Products
Gigacenter Ont
CVE-2025-54083

Calix GigaCenter ONT firmware - Sensitive Information Disclosure

Insecure Storage of Sensitive Information vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows admin access to the web interface.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Calix
Products
Gigacenter Ont
CVE-2025-7635

Calix GigaCenter ONT - Unauthenticated Telnet

Unauthenticated Telnet access vulnerability in Calix GigaCenter ONT allows root access.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Calix
Products
Calix Gigacenter Ont Gigacenter Ont