CVE-2026-1453

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1453", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "state": "PUBLISHED", "assignerShortName": "icscert", "dateReserved": "2026-01-26T19:48:46.732Z", "datePublished": "2026-01-29T19:02:26.431Z", "dateUpdated": "2026-01-29T20:28:55.866Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Encoder Series E1 hardware Version 1.4", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.7.2516"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series E1 hardware Version 1.6.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.7.2511"}, {"status": "affected", "version": "4.8.2523"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.6.2400"}, {"status": "affected", "version": "4.7.2512"}, {"status": "affected", "version": "4.8.2561"}, {"status": "affected", "version": "4.8.2554"}, {"status": "affected", "version": "4.3.2029"}, {"status": "affected", "version": "4.8.2555"}, {"status": "affected", "version": "4.6.2408"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series E1-s hardware Version 1.4", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.7.2516"}, {"status": "affected", "version": "4.8.2519"}, {"status": "affected", "version": "4.8.2525"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2561"}, {"status": "affected", "version": "4.8.2554"}, {"status": "affected", "version": "4.8.2523"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series E2 hardware Version 1.7.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2561"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series E2 hardware Version 1.8.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2523"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2554"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series G1 hardware Version 1.6.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2561"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series P1 hardware Version 1.3.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2633"}, {"status": "affected", "version": "4.8.2608"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series P2 hardware Version 1.8.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2633"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series RE1 hardware Version 2.0.00", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.7.2513"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series RE1 hardware Version 3.0.00", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2519"}, {"status": "affected", "version": "4.8.2561"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2525"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Muhammad Ammar (0xam225) reported this vulnerability to CISA."}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.<br>"}], "value": "A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 9.3, "baseSeverity": "CRITICAL", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"other": {"content": {"options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CNA", "version": "2.0.3"}, "type": "ssvc"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2026-01-29T19:02:26.431Z"}, "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-029-01"}, {"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-029-01.json"}], "source": {"discovery": "UNKNOWN"}, "title": "Missing Authentication for Critical Function in KiloView Encoder Series", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "KiloView has not responded to requests to work with CISA to mitigate \nthis vulnerability. Users of affected versions of KiloView Encoder \nSeries are invited to contact KiloView customer support for additional \ninformation.\n\n<br>"}], "value": "KiloView has not responded to requests to work with CISA to mitigate \nthis vulnerability. Users of affected versions of KiloView Encoder \nSeries are invited to contact KiloView customer support for additional \ninformation."}], "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-29T20:28:37.966375Z", "id": "CVE-2026-1453", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-29T20:28:55.866Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1453", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-29T20:28:37.966375Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-29T20:28:48.081Z"}}], "cna": {"title": "Missing Authentication for Critical Function in KiloView Encoder Series", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Muhammad Ammar (0xam225) reported this vulnerability to CISA."}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"other": {"type": "ssvc", "content": {"role": "CNA", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3"}}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "KiloView", "product": "Encoder Series E1 hardware Version 1.4", "versions": [{"status": "affected", "version": "4.7.2516"}], "defaultStatus": "unaffected"}, {"vendor": "KiloView", "product": "Encoder Series E1 hardware Version 1.6.20", "versions": [{"status": "affected", "version": "4.7.2511"}, {"status": "affected", "version": "4.8.2523"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.6.2400"}, {"status": "affected", "version": "4.7.2512"}, {"status": "affected", "version": "4.8.2561"}, {"status": "affected", "version": "4.8.2554"}, {"status": "affected", "version": "4.3.2029"}, {"status": "affected", "version": "4.8.2555"}, {"status": "affected", "version": "4.6.2408"}], "defaultStatus": "unaffected"}, {"vendor": "KiloView", "product": "Encoder Series E1-s hardware Version 1.4", "versions": [{"status": "affected", "version": "4.7.2516"}, {"status": "affected", "version": "4.8.2519"}, {"status": "affected", "version": "4.8.2525"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2561"}, {"status": "affected", "version": "4.8.2554"}, {"status": "affected", "version": "4.8.2523"}], "defaultStatus": "unaffected"}, {"vendor": "KiloView", "product": "Encoder Series E2 hardware Version 1.7.20", "versions": [{"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2561"}], "defaultStatus": "unaffected"}, {"vendor": "KiloView", "product": "Encoder Series E2 hardware Version 1.8.20", "versions": [{"status": "affected", "version": "4.8.2523"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2554"}], "defaultStatus": "unaffected"}, {"vendor": "KiloView", "product": "Encoder Series G1 hardware Version 1.6.20", "versions": [{"status": "affected", "version": "4.8.2561"}], "defaultStatus": "unaffected"}, {"vendor": "KiloView", "product": "Encoder Series P1 hardware Version 1.3.20", "versions": [{"status": "affected", "version": "4.8.2633"}, {"status": "affected", "version": "4.8.2608"}], "defaultStatus": "unaffected"}, {"vendor": "KiloView", "product": "Encoder Series P2 hardware Version 1.8.20", "versions": [{"status": "affected", "version": "4.8.2633"}], "defaultStatus": "unaffected"}, {"vendor": "KiloView", "product": "Encoder Series RE1 hardware Version 2.0.00", "versions": [{"status": "affected", "version": "4.7.2513"}], "defaultStatus": "unaffected"}, {"vendor": "KiloView", "product": "Encoder Series RE1 hardware Version 3.0.00", "versions": [{"status": "affected", "version": "4.8.2519"}, {"status": "affected", "version": "4.8.2561"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2525"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-029-01"}, {"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-029-01.json"}], "workarounds": [{"lang": "en", "value": "KiloView has not responded to requests to work with CISA to mitigate \nthis vulnerability. Users of affected versions of KiloView Encoder \nSeries are invited to contact KiloView customer support for additional \ninformation.", "supportingMedia": [{"type": "text/html", "value": "KiloView has not responded to requests to work with CISA to mitigate \nthis vulnerability. Users of affected versions of KiloView Encoder \nSeries are invited to contact KiloView customer support for additional \ninformation.\n\n<br>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.", "supportingMedia": [{"type": "text/html", "value": "A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2026-01-29T19:02:26.431Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1453", "state": "PUBLISHED", "dateUpdated": "2026-01-29T20:28:55.866Z", "dateReserved": "2026-01-26T19:48:46.732Z", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "datePublished": "2026-01-29T19:02:26.431Z", "assignerShortName": "icscert"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Encoder Series E1 hardware Version 1.4", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.7.2516"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series E1 hardware Version 1.6.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.7.2511"}, {"status": "affected", "version": "4.8.2523"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.6.2400"}, {"status": "affected", "version": "4.7.2512"}, {"status": "affected", "version": "4.8.2561"}, {"status": "affected", "version": "4.8.2554"}, {"status": "affected", "version": "4.3.2029"}, {"status": "affected", "version": "4.8.2555"}, {"status": "affected", "version": "4.6.2408"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series E1-s hardware Version 1.4", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.7.2516"}, {"status": "affected", "version": "4.8.2519"}, {"status": "affected", "version": "4.8.2525"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2561"}, {"status": "affected", "version": "4.8.2554"}, {"status": "affected", "version": "4.8.2523"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series E2 hardware Version 1.7.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2561"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series E2 hardware Version 1.8.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2523"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2554"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series G1 hardware Version 1.6.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2561"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series P1 hardware Version 1.3.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2633"}, {"status": "affected", "version": "4.8.2608"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series P2 hardware Version 1.8.20", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2633"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series RE1 hardware Version 2.0.00", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.7.2513"}]}, {"defaultStatus": "unaffected", "product": "Encoder Series RE1 hardware Version 3.0.00", "vendor": "KiloView", "versions": [{"status": "affected", "version": "4.8.2519"}, {"status": "affected", "version": "4.8.2561"}, {"status": "affected", "version": "4.8.2611"}, {"status": "affected", "version": "4.8.2525"}]}], "source": "ics-cert@hq.dhs.gov"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product."}, {"lang": "es", "value": "Una vulnerabilidad de ausencia de autenticaci\u00f3n para funci\u00f3n cr\u00edtica en la serie de codificadores KiloView podr\u00eda permitir a un atacante no autenticado crear o eliminar cuentas de administrador. Esta vulnerabilidad puede otorgar al atacante control administrativo total sobre el producto."}], "id": "CVE-2026-1453", "lastModified": "2026-06-17T10:15:49.090", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}], "ssvcV203": [{"source": "ics-cert@hq.dhs.gov", "ssvcData": {"options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CNA", "version": "2.0.3"}}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1453", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-29T20:28:37.966375Z", "version": "2.0.3"}}]}, "published": "2026-01-29T19:16:18.987", "references": [{"source": "ics-cert@hq.dhs.gov", "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-029-01.json"}, {"source": "ics-cert@hq.dhs.gov", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-029-01"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T14:31:55.520079+00:00", "value": {"mitigation_remediation": ["Contact KiloView customer support for guidance on firmware updates or patches", "Restrict external access to the device\u2019s management interface through network segmentation or firewall rules", "Implement temporary management interface controls, such as disabling remote admin or requiring strong authentication before any administrative operations"], "summary": {"action": "Contact Vendor", "impact": "Full administrative control over the device"}, "threat_synthesis": {"affected_systems": "Affected hardware includes the KiloView Encoder Series models E1 (hardware versions 1.4 and 1.6.20), E1\u2011s (1.4), E2 (1.7.20 and 1.8.20), G1 (1.6.20), P1 (1.3.20), P2 (1.8.20), and RE1 (2.0.00 and 3.0.00).", "description_and_impact": "A missing authentication flaw in KiloView Encoder Series allows anyone who can reach the device to create or delete administrator accounts, which grants complete administrative control. The weakness is a lack of authentication for a critical function (CWE\u2011306). An attacker could configure the device, exfiltrate or alter data, or disable services, compromising confidentiality, integrity, and availability at the device level.", "risk_and_exploitability": "The CVSS score of 9.3 indicates a high\u2011severity vulnerability, while the EPSS score shows a very low current exploitation probability (<1%). The vulnerability is not listed in CISA\u2019s KEV catalog. Exploitation likely requires network access to the device\u2019s management interface; an attacker could trigger the flaw by issuing directed requests that create or delete administrative accounts without needing prior authentication."}}}}, "created": "2026-01-30T08:42:37.763756+00:00", "updated": "2026-04-18T14:45:03.115415+00:00", "vendors": ["kiloview", "kiloview$PRODUCT$encoder_series"]}