UPnP exists, it's a really weird bit of technology that goes against all ideas of "security".

"Hey, so I can just do a HTTP request to the router and open a port? Neat"

Used to use it back in the day when my ISP didn't allow for port forwarding, but did allow UPnP, so had a cron job that re-opened it every x hours when it reset.