Live › vulnerability › CVE-2026-117082
The Sercomm AOT-4221SR 4.6 dual-band GPON ONU has a UPnP framework flaw that accepts arbitrary SOAP requests on port 5555 without credentials. An attacker can reach 15 administrative, WAN, LAN and firewall services, change routing tables and DNS servers, and remove firewall rules.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 20:35 UTC. All times on this page are UTC.
Operators of the Sercomm AOT-4221SR 4.6 GPON ONU, usually an ISP-supplied fiber gateway. The CVE says that UPnP SOAP requests on port 5555 are accepted without credentials, so anyone who can reach that port can change routing, DNS and firewall settings. Whether the port is reachable from the internet by default is not stated. Other firmware versions and other Sercomm models are not confirmed either way.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOT-4221SR | vendor | 4.6 (other firmware unknown) | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dual Band GPON ONU device allows an attackers to execute arbitrary SOAP requests via port 5555. This flaw exposes 15 administrative, WAN, LAN, and firewall services without requiring credentials, enabling attackers to modify core routing tables, alter DNS servers, remove firewall rules, and completely compromise the network.
This page as .md · .json · in your agent: get_signal("CVE-2026-117082")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.