PG5298A vulnerabilities

2 known vulnerabilities in PG5298A from KAON. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  PG5298A: Missing Authentication for Critical Functionality

  CVE-2026-6017Aug 24, 2026KAON

  Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A

• 8.5 High severity

  PG5298A: Incorrect Authorization

  CVE-2025-63080Aug 24, 2026KAON

  Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 fo