CVE-2026-19746
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Assessment
A remote attacker can cause denial of service on the GigaSpire device, potentially disrupting network operations or services provided by the device. Publicly available exploit increases the risk of exploitation.
Recommendation
Contact the vendor for a patch or workaround. Restrict external access to the device and monitor logs for suspicious requests to traceroute.cmd.
Original NVD description (English source)
A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.