Critical severity · published Jan 29, 2026
CVE-2026-1453
Missing Authentication for Critical Function in KiloView Encoder Series
9.8
CVSS
0.5%
EPSS
No
On KEV
Description
A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Encoder Series E1 hardware Version 1.4 · KiloView
4.7.2516 · source: vendor
ES
Encoder Series E1 hardware Version 1.6.20 · KiloView
4.7.2511; 4.8.2523; 4.8.2611; 4.6.2400; 4.7.2512; 4.8.2561; +4 more · source: vendor
ES
Encoder Series E1-s hardware Version 1.4 · KiloView
4.7.2516; 4.8.2519; 4.8.2525; 4.8.2611; 4.8.2561; 4.8.2554; +1 more · source: vendor
ES
Encoder Series E2 hardware Version 1.7.20 · KiloView
4.8.2611; 4.8.2561 · source: vendor
ES
Encoder Series E2 hardware Version 1.8.20 · KiloView
4.8.2523; 4.8.2611; 4.8.2554 · source: vendor
ES
Encoder Series G1 hardware Version 1.6.20 · KiloView
4.8.2561 · source: vendor
ES
Encoder Series P1 hardware Version 1.3.20 · KiloView
4.8.2633; 4.8.2608 · source: vendor
ES
Encoder Series P2 hardware Version 1.8.20 · KiloView
4.8.2633 · source: vendor
ES
Encoder Series RE1 hardware Version 2.0.00 · KiloView
4.7.2513 · source: vendor
ES
Encoder Series RE1 hardware Version 3.0.00 · KiloView
4.8.2519; 4.8.2561; 4.8.2611; 4.8.2525 · source: vendor
Affected product
ES
Encoder Series E1 hardware Version 1.4
KiloView