CVE-2026-1453: Kiloview Encoder Series e1-S Hardware Version 1.4

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.

Affected products

• Kiloview Encoder Series e1-S Hardware Version 1.4: version 4.7.2516 only; version 4.8.2519 only; version 4.8.2525 only; version 4.8.2611 only; version 4.8.2561 only; version 4.8.2554 only; …
• Kiloview Encoder Series e1 Hardware Version 1.4: version 4.7.2516 only
• Kiloview Encoder Series e1 Hardware Version 1.6.20: version 4.7.2511 only; version 4.8.2523 only; version 4.8.2611 only; version 4.6.2400 only; version 4.7.2512 only; version 4.8.2561 only; …
• Kiloview Encoder Series e2 Hardware Version 1.7.20: version 4.8.2611 only; version 4.8.2561 only
• Kiloview Encoder Series e2 Hardware Version 1.8.20: version 4.8.2523 only; version 4.8.2611 only; version 4.8.2554 only
• Kiloview Encoder Series g1 Hardware Version 1.6.20: version 4.8.2561 only
• Kiloview Encoder Series p1 Hardware Version 1.3.20: version 4.8.2633 only; version 4.8.2608 only
• Kiloview Encoder Series p2 Hardware Version 1.8.20: version 4.8.2633 only
• Kiloview Encoder Series RE1 Hardware Version 2.0.00: version 4.7.2513 only
• Kiloview Encoder Series RE1 Hardware Version 3.0.00: version 4.8.2519 only; version 4.8.2561 only; version 4.8.2611 only; version 4.8.2525 only

Published 2026-01-29. Last modified 2026-06-17.