CVE-2026-52749

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perform unauthorized actions on upgrade-related functionalities. These actions can be abused to force the router to issue GET requests to arbitrarily chosen domains. This issue was identified in firmware versions up to 4.2.17. Status of newer versions remains unknown.

• CWE-287

• https://cert.pl/en/posts/2026/09/CVE-2026-52748

Published

Sep 28, 2026

Last Modified

Sep 28, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-52743GoCD is a continuous deliver server. Prior to 26.1.0, the in…4.3
• CVE-2026-52744GoCD is a continuous deliver server. From 20.2.0 until 26.1.…5.3
• CVE-2026-52745CordysCRM is an open source AI-powered customer relationship…5.3
• CVE-2026-52746JSONata is a JSON query and transformation language. Prior t…7.5
• CVE-2026-52747ModSecurity is an open source, cross platform web applicatio…8.6
• CVE-2026-52748The Kaon AR2140X router contains a vulnerability where the b…7.1
• CVE-2026-5275Heap buffer overflow in ANGLE in Google Chrome on Mac prior …8.8
• CVE-2026-52750Ghidra before 12.1 contains a command injection vulnerabilit…8.4
• CVE-2026-52751Ghidra before 12.1 contains an unsafe deserialization vulner…8.8
• CVE-2026-52752Ghidra before 12.0.2 contains a path traversal vulnerability…8.4
• CVE-2026-52753Ghidra before 12.0.3 contains an out-of-memory vulnerability…6.7
• CVE-2026-52754Ghidra before 12.1 contains an authentication bypass vulnera…8.8