Critical KiloView Vulnerabilities Allow Attackers to Gain Full Administrative Control

The Cybersecurity and Infrastructure Security Agency (CISA) has disclosed a critical vulnerability affecting multiple versions of KiloView Encoder Series devices, warning that unauthenticated attackers could gain full administrative access.

Issued under alert code ICSA-26-029-01 on January 29, 2026, the flaw carries a severe CVSS v3 score of 9.8, indicating extreme risk to affected infrastructure.

Vulnerability Details

The vulnerability, tracked as CVE-2026-1453, stems from the lack of authentication mechanisms for critical administrative functions.

This authentication bypass represents a fundamental security failure that remote, unauthenticated actors can trigger from across the network without requiring any credentials or user interaction.

Successful exploitation enables attackers to create or delete administrator accounts without authorization, thereby granting them complete control over the affected devices.

Researchers Muhammad Ammar (0xam225) discovered and reported the vulnerability to CISA, demonstrating responsible disclosure practices through coordinated vulnerability reporting channels.

KiloView Encoder devices are widely deployed across critical infrastructure sectors, including communications and information technology.

The company, headquartered in China, manufactures encoding equipment used globally, making this vulnerability a concern for organizations worldwide.

The vulnerability affects multiple hardware versions and firmware builds across eight encoder series variants, including the E1, E2, G1, P1, P2, and RE1 lines.

The broad scope of affected devices underscores the widespread nature of this security flaw and the potential scale of exposure across industrial control systems and enterprise networks.

The agency has found no evidence of active exploitation at this time. However, the critical nature of the flaw suggests urgent remediation is necessary before threat actors develop and deploy functional exploits targeting this authentication bypass.

CISA recommends immediate defensive measures, including network isolation of affected devices and restriction of Internet accessibility.

Organizations should deploy control system networks behind firewalls and isolate them from business networks to minimize exposure to potential compromises.

When remote access is unavoidable, organizations should implement Virtual Private Networks (VPNs) with current security patches.

However, administrators must recognize that VPNs carry their own vulnerabilities and should be part of a defense-in-depth strategy rather than a standalone solution.

Organizations should minimize network exposure for all control system devices and evaluate risk before implementing defensive measures.

CISA encourages implementation of comprehensive cybersecurity planning and defense-in-depth strategies for industrial control systems to address not only this vulnerability but broader security postures.

No public exploitation of this vulnerability has been reported, providing a critical window for organizations to patch systems before potential attackers weaponize the flaw.

This window is typically narrow for critical vulnerabilities, making immediate action essential for affected organizations.

Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google.