CVE-2026-45433 is a vulnerability in GX INDIA's GX Earth 2022 ONT models caused by the inclusion of a hardcoded RSA private key in the device firmware. This flaw allows remote attackers to extract the private key, which can be used to decrypt HTTPS communications and perform MITM attacks on the affected devices. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, and no privileges or user interaction required. There is no vendor advisory or patch available at this time.

The presence of a hardcoded RSA private key compromises the confidentiality and integrity of encrypted communications by enabling attackers to decrypt HTTPS traffic and conduct Man-in-the-Middle attacks. This undermines the security guarantees of TLS connections on the affected devices, potentially exposing sensitive data and allowing unauthorized interception or modification of network traffic.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting exposure of affected devices to untrusted networks and monitor for any updates from GX INDIA regarding patches or mitigations.