KAON

Products

ProductCVEsExploitedLatest
AR21402–Sep 28, 2026
PG5298A2–Aug 24, 2026
PG5298B2–Aug 24, 2026
KCM31001–Jun 18, 2025
CG3000TC1–Jan 9, 2026
CG30001–Sep 11, 2024
CG3000T1–Jan 9, 2026

Exploited and recent CVEs

  • CVE-2026-52749 Medium 5.3 Improper Authentication in Kaon AR2140X 0.3%
  • CVE-2026-52748 High 7.1 Missing authentication for backup functionality in Kaon AR2140X 0.3%
  • CVE-2025-63080 High 8.5 Authenticated RCE in KAON PG5298 0.3%
  • CVE-2025-63080 High 8.5 Authenticated RCE in KAON PG5298 0.3%
  • CVE-2026-6017 High 7.1 Missing Authentication for Critical Function in KAON PG5298 0.2%
  • CVE-2026-6017 High 7.1 Missing Authentication for Critical Function in KAON PG5298 0.2%
  • CVE-2025-7072 Critical 9.3 Hardcoded credentials in KAON CG3000T/CG3000CT routers 0.6%
  • CVE-2025-7072 Critical 9.3 Hardcoded credentials in KAON CG3000T/CG3000CT routers 0.6%
  • CVE-2025-51381 Critical 9.8 An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of the product from within the LAN to which 0.7%
  • CVE-2024-8693 Low 2.4 Kaon CG3000 dhcpcd Command cross site scripting 0.3%