Skip to content
OpenAdvisories

Vendor

Kaon

8 known vulnerabilities.

Products

AR2140 3 PG5298A 2 PG5298B 2 CG3000T 1 CG3000TC 1 CG3000 1 KCM3100 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-52748

    Missing authentication for backup functionality in Kaon AR2140X

    The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key…

    Kaon AR2140
  • High 8.5
    CVE-2025-63080

    Authenticated RCE in KAON PG5298

    Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution.    This vulnerability has been fixed in firmware version: 3.0.8…

    Kaon PG5298B PG5298A
  • High 7.1
    CVE-2026-6017

    Missing Authentication for Critical Function in KAON PG5298

    Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal.   This vulnerability has been fixed in firmware version: 3.0.82 for PG52…

    Kaon PG5298B PG5298A