Kaon

6 CVEs across 7 Kaon products. Browse Kaon vulnerabilities, severities, and proof-of-concept exploits.

Kaon products with known CVEs

ProductCVEs
Pg5298a2
Pg5298b2
Ar21401
Cg30001
Cg3000t1
Cg3000tc1
Kcm31001
Kaon CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-527492026-09-28The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain…
CVE-2026-60172026-08-24Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to…
CVE-2025-630802026-08-24Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. sy…
CVE-2025-70722026-01-09The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all routers of this model) that an unauthenticat…
CVE-2025-51381Critical9.82025-06-18An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of…
CVE-2024-8693Low2.42024-09-11A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the compon…