Unpatched vulnerability in Calix GS7 routers enables unauthorized NAT bypass and device exposure

A critical unpatched vulnerability in Calix GS7 XGS residential routers allows remote, unauthenticated attackers to manipulate port-forwarding rules. This flaw exposes internal network devices to the public internet, creating significant risk for residential and small business users across multiple U.S. broadband providers.