Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: KAON PG5298A, PG5298B 3.0.82, 4.0.82 Clear all filters
TI-2025-39228 CVE-2025-63080 · GHSA-qr3p-6238-2p49

Authenticated RCE in KAON PG5298

Priority LOW 39

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.00285 Published 2026-08-24 Fixed in 3.0.82, 4.0.82 CWE-863
TI-2026-05280 CVE-2026-6017 · GHSA-4v96-chmw-8jc6

Missing Authentication for Critical Function in KAON PG5298

Priority LOW 31

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00236 Published 2026-08-24 Fixed in 3.0.82, 4.0.82 CWE-306