Denial of Service Vulnerability in Calix GigaSpire Products
CVE-2026-19746

5.3MEDIUM

Key Information:

Vendor

Calix

Status
Gigaspire
Vendor
CVE Published:
13 August 2026

What is CVE-2026-19746?

A vulnerability exists in the Calix GigaSpire 26.1.0 related to an unknown function in the 'traceroute.cmd' file, which can lead to a denial of service. This issue can be triggered remotely, posing a potential risk to users. Although disclosure was made to the vendor, no response has been recorded. The issue has been publicly disclosed, warranting attention and mitigation efforts to secure affected installations.

Affected Version(s)

GigaSpire 26.1.0

References

https://vuldb.com/vuln/389484
vdb-entry
https://vuldb.com/vuln/389484/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-19746
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

VulDB CNA Team
.