CVE-2026-6017

HighCVSS 7.1

Published: 24/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 24/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

Firmware in KAON PG5298A and PG5298B routers allows an unauthenticated user to query a specific endpoint and acquire sensitive information such as the admin portal password. Fixed in firmware versions 3.0.82 (PG5298A) and 4.0.82 (PG5298B).

Risk Assessment

Risk of unauthorized control over the router.

Recommendation

Update router firmware to version 3.0.82 (PG5298A) or 4.0.82 (PG5298B).

Other vulnerabilities in KAON PG5298A/PG5298B

CVE-2025-63080High
Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. Fixed in firmware version 3.0.82 for PG5298A and 4.0.82 for PG5298B.

Original NVD description (English source)

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B.