CVE-2026-1453 CRITICAL

CVE-2026-1453: Missing Authentication for Critical Function in KiloView Encoder Series

Vendor Kiloview
Product Encoder Series E1 hardware Version 1.4
Weakness CWE-306 · Missing auth
Published January 29, 2026
Last update January 29, 2026

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.

Key dates

02Disclosure timeline

January 29, 2026 CVE published
January 29, 2026 Record updated