Critical Flaws in KiloView Devices Enable Complete Admin Takeover

CISA issued an alert for CVE-2026-1453, a critical (CVSS 9.8) authentication-bypass vulnerability in multiple KiloView Encoder Series devices that enables unauthenticated remote attackers to create or delete administrator accounts and obtain full device control; the advisory lists affected models, credits the researcher, reports no observed exploitation, and recommends immediate mitigation steps such as isolating affected devices, restricting Internet access, using firewalls/VPNs carefully, and applying defense-in-depth measures.