CVE-2026-1453

Missing Authentication for Critical Function in KiloView Encoder Series

State: Published
Severity: 9.3 Critical
Published: Jan 29, 2026
Updated: Jan 29, 2026
Reserved: Jan 26, 2026

Description

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	icscert
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	icscert

Weaknesses

CWE-306 Missing Authentication for Critical Function

Affected Products

Product	Versions
Encoder Series E1 hardware Version 1.4KiloView	4.7.2516Affected
Encoder Series E1 hardware Version 1.6.20KiloView	4.7.2511Affected 4.8.2523Affected 4.8.2611Affected 4.6.2400Affected 4.7.2512Affected 4.8.2561Affected 4.8.2554Affected 4.3.2029Affected 4.8.2555Affected 4.6.2408Affected
Encoder Series E1-s hardware Version 1.4KiloView	4.7.2516Affected 4.8.2519Affected 4.8.2525Affected 4.8.2611Affected 4.8.2561Affected 4.8.2554Affected 4.8.2523Affected
Encoder Series E2 hardware Version 1.7.20KiloView	4.8.2611Affected 4.8.2561Affected
Encoder Series E2 hardware Version 1.8.20KiloView	4.8.2523Affected 4.8.2611Affected 4.8.2554Affected
Encoder Series G1 hardware Version 1.6.20KiloView	4.8.2561Affected
Encoder Series P1 hardware Version 1.3.20KiloView	4.8.2633Affected 4.8.2608Affected
Encoder Series P2 hardware Version 1.8.20KiloView	4.8.2633Affected
Encoder Series RE1 hardware Version 2.0.00KiloView	4.7.2513Affected
Encoder Series RE1 hardware Version 3.0.00KiloView	4.8.2519Affected 4.8.2561Affected 4.8.2611Affected 4.8.2525Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.