CVE-2025-9265: Kiloview NDI

Critical severity, CVSS 10.0. EPSS: 0.2% chance of exploitation in the next 30 days.

A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects Kiloview NDI N30 and was fixed in Firmware version later than 2.02.0246

Affected products

• Kiloview NDI: version 2.02.246 only

Published 2025-10-13. Last modified 2026-06-17.