CVE-2026-96616
CVE-2026-96616 · Kiloview E3 NDI Encoder Insufficient Session Expiration
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.
CVSS 8.3 · High · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
e3 firmware
- Versions
- ≥ 0, < 1.30: Affected (custom)
- 1.30: Not affected
Update to 1.30