KAON vulnerabilities

🔔 Create alert RSS

Published CVEs affecting KAON products: 3 record(s), with severity, exploitation and fixes.

PG5298A 2 PG5298B 2 CG3000T 1 CG3000TC 1

Exploited only (KEV) →

CVE-2026-6017 High · 7.1 CWE-306 Aug 24, 2026

Missing Authentication for Critical Function in KAON PG5298

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B.

CVE-2025-63080 High · 8.5 CWE-863 Aug 24, 2026

Authenticated RCE in KAON PG5298

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B.

CVE-2025-7072 Critical · 9.3 CWE-798 Jan 9, 2026

Hardcoded credentials in KAON CG3000T/CG3000CT routers

The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all routers of this model) that an unauthenticated remote attacker could use to execute commands with root privileges. This vulnerability has been fixed in firmware version: 1.00.67 for CG3000TC and 1.00.27 for CG3000T.