TI-2026-37867 CVE-2026-52749 · GHSA-rmcq-5353-m59x
Improper Authentication in Kaon AR2140X
Priority LOW 30
The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests.
Vulnerabilities
7 records
TI-2026-37866 CVE-2026-52748 · GHSA-vcfv-29fp-vc3c
Missing authentication for backup functionality in Kaon AR2140X
Priority LOW 31
The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication.
TI-2025-39228 CVE-2025-63080 · GHSA-qr3p-6238-2p49
Authenticated RCE in KAON PG5298
Priority LOW 39
Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g.
TI-2026-05280 CVE-2026-6017 · GHSA-4v96-chmw-8jc6
Missing Authentication for Critical Function in KAON PG5298
Priority LOW 31
Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal.
TI-2025-06434 CVE-2025-7072 · GHSA-c223-65f8-3p5p
Hardcoded credentials in KAON CG3000T/CG3000CT routers
Priority MEDIUM 49
The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all routers of this model) that an unauthenticated remote attacker could use to execute commands with root pr…
TI-2025-32314 CVE-2025-51381 · GHSA-g74p-x9cp-q6j2
Authentication bypass in KAON KCM3100
Priority MEDIUM 49
An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier.
TI-2024-08063 CVE-2024-8693 · GHSA-qrjx-rm44-85vw
Kaon CG3000 dhcpcd Command cross site scripting
Priority MEDIUM 56
A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43.