Back to overview

CVE-2026-1453

CRITICAL
9.8
CVSS 3.1
Description
A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.

Metadata

CVE ID
CVE-2026-1453
State
PUBLISHED
Assigner
icscert
Reserved
2026-01-26 19:48 UTC
Published
2026-01-29 19:02 UTC
Last updated
2026-01-29 20:28 UTC
Primary CWE
CWE-306
CWE-306 Missing Authentication for Critical Function
Vendor / Product
KiloView / Encoder Series E1 hardware Version 1.4
Sources
cve.org  ·  NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
yes
Tech. Impact
total
Affected products (10)
VendorProductPlatformVersions
KiloView Encoder Series E1 hardware Version 1.4 — 4.7.2516
KiloView Encoder Series E1 hardware Version 1.6.20 — 4.7.2511, 4.8.2523, 4.8.2611, 4.6.2400 …
KiloView Encoder Series E1-s hardware Version 1.4 — 4.7.2516, 4.8.2519, 4.8.2525, 4.8.2611 …
KiloView Encoder Series E2 hardware Version 1.7.20 — 4.8.2611, 4.8.2561
KiloView Encoder Series E2 hardware Version 1.8.20 — 4.8.2523, 4.8.2611, 4.8.2554
KiloView Encoder Series G1 hardware Version 1.6.20 — 4.8.2561
KiloView Encoder Series P1 hardware Version 1.3.20 — 4.8.2633, 4.8.2608
KiloView Encoder Series P2 hardware Version 1.8.20 — 4.8.2633
KiloView Encoder Series RE1 hardware Version 2.0.00 — 4.7.2513
KiloView Encoder Series RE1 hardware Version 3.0.00 — 4.8.2519, 4.8.2561, 4.8.2611, 4.8.2525
Weakness (CWE)
CWESourceDescription
CWE-306 cna CWE-306 Missing Authentication for Critical Function
CVSS scores (2)
ScoreSeverityVersionSourceVector
9.8 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 CRITICAL 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References (2)
Back to overview