CVE-2026-1453
Missing Authentication for Critical Function in KiloView Encoder Series
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 4.0 | Critical9.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| icscertCNA (assigner) | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Deferred | 4.0 | Critical9.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.54% · top 54% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.3.
Weakness
Affected products
KiloView · Encoder Series E1 hardware Version 1.4
- affected 4.7.2516
KiloView · Encoder Series E1 hardware Version 1.6.20
- affected 4.7.2511
- affected 4.8.2523
- affected 4.8.2611
- affected 4.6.2400
- affected 4.7.2512
- affected 4.8.2561
- affected 4.8.2554
- affected 4.3.2029
- affected 4.8.2555
- affected 4.6.2408
KiloView · Encoder Series E1-s hardware Version 1.4
- affected 4.7.2516
- affected 4.8.2519
- affected 4.8.2525
- affected 4.8.2611
- affected 4.8.2561
- affected 4.8.2554
- affected 4.8.2523
KiloView · Encoder Series E2 hardware Version 1.7.20
- affected 4.8.2611
- affected 4.8.2561
KiloView · Encoder Series E2 hardware Version 1.8.20
- affected 4.8.2523
- affected 4.8.2611
- affected 4.8.2554
KiloView · Encoder Series G1 hardware Version 1.6.20
- affected 4.8.2561
KiloView · Encoder Series P1 hardware Version 1.3.20
- affected 4.8.2633
- affected 4.8.2608
KiloView · Encoder Series P2 hardware Version 1.8.20
- affected 4.8.2633
KiloView · Encoder Series RE1 hardware Version 2.0.00
- affected 4.7.2513
KiloView · Encoder Series RE1 hardware Version 3.0.00
- affected 4.8.2519
- affected 4.8.2561
- affected 4.8.2611
- affected 4.8.2525
What to do
Workaround: KiloView has not responded to requests to work with CISA to mitigate this vulnerability. Users of affected versions of KiloView Encoder Series are invited to contact KiloView customer support for additional information.
References (2)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2026-1453)Record last updated .