Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-6017

Missing Authentication for Critical Function in KAON PG5298

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERT-PL

Description

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal.   This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

KAON PG5298A

Default version status: unaffected

  • 0 to < 3.0.82affected

KAON PG5298B

Default version status: unaffected

  • 0 to < 4.0.82affected

References