CVE-2026-1453: Missing Authentication for Critical Function in KiloView Encoder Series
Vulnerability summary
CVE-2026-1453 is a critical (CVSS 9.8) vulnerability in kiloview encoder series e1 hardware version 1.4. EPSS estimates a 0.55% chance of exploitation in the next 30 days, higher than 44.9% of scored vulnerabilities.
Timeline
- 29-01-2026PublishedVulnerability first disclosed.
- 29-01-2026Last modifiedVulnerability information updated.
Description
A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.
CVSS metrics
4 scores · 2 sources · 2 versions- NVDNIST9.3CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.55%
Chance of exploitation in the next 30 days
Percentile
45%
Versus all other CVEs
30-day change
Increase +0.03 pp
From 0.52% on 22-09-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Kiloview10 products
- encoder series e1 hardware version 1.44.7.2516
- encoder series e1 hardware version 1.6.204.7.2511 | 4.8.2523 | 4.8.2611 | 4.6.2400 | 4.7.2512 | 4.8.2561 | 4.8.2554 | 4.3.2029 | 4.8.2555 | 4.6.2408
- encoder series e1-s hardware version 1.44.7.2516 | 4.8.2519 | 4.8.2525 | 4.8.2611 | 4.8.2561 | 4.8.2554 | 4.8.2523
- encoder series e2 hardware version 1.7.204.8.2611 | 4.8.2561
- encoder series e2 hardware version 1.8.204.8.2523 | 4.8.2611 | 4.8.2554
1 vendor · 10 products