Description
Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal.  
This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B.
Published: 2026-08-24
Score: 7.1 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 24 Aug 2026 11:30:00 +0000

Type Values Removed Values Added
Description Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal.   This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B.
Title Missing Authentication for Critical Function in KAON PG5298
First Time appeared Kaon
Kaon pg5298a
Kaon pg5298b
Weaknesses CWE-306
CPEs cpe:2.3:a:kaon:pg5298a:*:*:*:*:*:*:*:*
cpe:2.3:a:kaon:pg5298b:*:*:*:*:*:*:*:*
Vendors & Products Kaon
Kaon pg5298a
Kaon pg5298b
References
Metrics cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Kaon Pg5298a Pg5298b
cve-icon MITRE

Status: PUBLISHED

Assigner: CERT-PL

Published:

Updated: 2026-08-24T11:11:14.277Z

Reserved: 2026-04-09T14:47:58.734Z

Link: CVE-2026-6017

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-24T12:16:54.030

Modified: 2026-08-24T12:16:54.030

Link: CVE-2026-6017

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-24T12:30:16Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function