Kaon — Vulnerabilities & Security Advisories 3

Kaon is an interactive digital solutions provider creating immersive presentations and virtual experiences for enterprise clients. Historically, their products have faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, primarily affecting web-based components and content management systems. Security researchers have identified authentication bypass flaws and insecure direct object references in their platforms. While no major public security incidents have been widely reported, the three CVEs on record highlight recurring issues in input validation and access control, suggesting a need for enhanced security testing in their development lifecycle. Their interactive nature increases attack surface, particularly for client-side vulnerabilities in rich media applications.