CVE Intelligence
Analysis AI-assisted

CVE-2026-1453: KiloView Encoder Series - Missing Authentication for Critical Function

CVE-2026-1453 affects the KiloView Encoder Series and is classified as missing authentication for a critical function (CWE-306). According to the record, an unauthenticated attacker could create or delete administrator accounts, which may grant full administrative control over the product. The CNA (ICS-CERT) rated it critical, with a CVSS 3.1 base score of 9.8.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2026-1453 is recorded in NVD and the CVE Program for the KiloView Encoder Series. The weakness is CWE-306, missing authentication for a critical function. The CNA is ICS-CERT, and the related advisory is CISA ICSA-26-029-01.

Impact

  • According to the record, an unauthenticated attacker could create or delete administrator accounts.
  • Such access may grant full administrative control over the product.
  • Scores attributed to ICS-CERT in the record: CVSS 3.1 base score 9.8 (critical) and CVSS 4.0 score 9.3.

Affected products and versions

  • The record does not list affected product versions or fixed versions.
  • Consult the CISA advisory for product and version details.

Exploitation status

  • CISA KEV does not list this CVE in the record.
  • No confirmed exploitation appears in the sources consulted for this analysis.
  • No EPSS data is present in the record.

Remediation and mitigation

  • Review the CISA advisory for vendor guidance and any fixed versions.
  • Restrict network access to KiloView management interfaces and place devices on segmented networks.
  • Limit administrative access to trusted personnel and hosts until a fix is confirmed.

Detection guidance

  • Review administrator account lists for creations or deletions that were not authorized.
  • Review available logs for account management events.
  • Investigate administrative sessions originating from unexpected sources.

Limitations of the available information

  • Affected version ranges, fixed versions, exploitation data, EPSS and SSVC are not present in the record.
  • The record has no English title, so the title was written from the vulnerability description.

Frequently asked questions

What does CVE-2026-1453 allow an attacker to do?

According to the record, an unauthenticated attacker could create or delete administrator accounts, which may grant full administrative control over the KiloView Encoder Series product.

Is this CVE known to be actively exploited?

CISA KEV does not list this CVE in the record, and no confirmed exploitation appears in the sources consulted for this analysis.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.