CVE-2026-6017: PG5298A 0 to before 3.0.82; +1 more affected products

Affected technology

PG5298A · 0 to before 3.0.82
KAON

PG5298B · 0 to before 4.0.82
KAON

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

An unauthenticated user can query a specific endpoint and acquire sensitive information such as a password to the administrative portal. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as high; integrity and availability impact as none.