{"schema":"threatline.record/2","record":{"id":"CVE-2026-52748","aliases":[],"summary":"Missing authentication for backup functionality in Kaon AR2140X","details":"The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the router inoperable for a substantial period of time. \n\n\n\nThis issue was identified in firmware versions up to 4.2.17. Status of newer versions remains unknown.","categories":["Unclassified"],"product":"AR2140","vendor":"Kaon","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-52748","source_modified_at":"2026-09-28T13:31:27.461Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"AR2140","vendor":"Kaon","versions":[{"status":"affected","version":"0","lessThanOrEqual":"4.2.17","versionType":"semver"}],"defaultStatus":"unknown"}],"fixed_versions":[],"cvss":7.1,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00254,"percentile":0.16103,"score_date":"2026-10-23"},"published_at":"2026-09-28T13:01:54.068Z","modified_at":"2026-09-28T13:31:27.461Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-52748","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-09-28T13:31:27.461Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-52748","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://cert.pl/en/posts/2026/09/CVE-2026-52748","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-09-28T13:19:21.836649Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-09-28T13:31:27.461Z","content_hash":"b4b064528a59a7b7b0cc070f6c31572d2ae790f017aba7560f6f87100452d7ef"}}