---
id: CVE-2026-6017
title: >-
  Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to
  query a specific endpoint and acquire sensitive information such as a password
  to the administrative portal
summary: "Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. \_ \nThis vulnerability has been fixed in firmware v…"
severity: none
cwe:
  - CWE-306
published: '2026-08-24'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-6017'
references:
  - url: 'https://cert.pl/en/posts/2026/08/CVE-2025-63080/'
    label: cvd@cert.pl
tags:
  - nvd
epss: 0.00236
epssPercentile: 0.13504
ingestedAt: '2026-10-14T13:30:58.557Z'
---

## Overview

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal.   
This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.