{"id":"CVE-2026-92450","aliases":[],"cve":{"records":[{"id":"CVE-2026-92450","source":"icscert","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-19T19:58:03.666Z","published":"2026-10-22T22:09:58.517Z","modified":"2026-11-02T12:38:23.833Z"}],"publishers":[{"name":"icscert","role":"CNA","organizationId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","modified":"2026-10-22T22:09:58.517Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-02T12:38:23.833Z"}],"references":[{"url":"https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/","tags":[],"source":"icscert"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01","tags":[],"source":"icscert"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-01.json","tags":[],"source":"icscert"}],"weaknesses":[{"id":"CWE-798","description":"CWE-798","source":"icscert"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-02T12:38:09.979126Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Kiloview E3 NDI Encoder Use of Hard-coded Credentials","titleSource":"icscert","descriptionSource":"icscert","description":"The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can recover this secret and forge arbitrary session tokens, including administrative tokens, without valid credentials, enabling unauthenticated access to privileged device functions.","score":8.7,"severity":"high","published":"2026-10-22T22:09:58.517Z","modified":"2026-11-02T12:38:23.833Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Kiloview","name":"E3 Firmware","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"1.30","versionType":"custom"},{"version":"1.30","status":"unaffected"}],"defaultStatus":"unaffected","cpes":[],"source":"icscert","url":"https://www.cve.org/CVERecord?id=CVE-2026-92450"}],"remediation":[{"text":"KiloView recommends users update to V1.30:  https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/","source":"icscert","url":"https://www.cve.org/CVERecord?id=CVE-2026-92450"}],"references":["https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/","https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01","https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-01.json"],"sources":[{"name":"CVE","id":"CVE-2026-92450","modified":"2026-11-02T12:38:23.833Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-92450"}],"assessments":[{"source":"icscert","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5},{"source":"icscert","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","score":8.7}],"sourceAffected":[],"observedAt":"2026-11-02T12:45:50.584Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T22:40:32.870Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-02T12:50:32.655Z","attemptedAt":"2026-11-02T12:50:32.655Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-02T12:50:32.321Z","attemptedAt":"2026-11-02T12:50:32.321Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-02T12:50:32.655Z","attemptedAt":"2026-11-02T12:50:32.655Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-02T12:50:32.655Z","attemptedAt":"2026-11-02T12:50:32.655Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-29fw-766p-vxq6","url":"https://github.com/advisories/GHSA-29fw-766p-vxq6","modified":"2026-10-23T00:33:21Z","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-02T12:50:32.321Z"},{"source":"FIRST EPSS","id":"CVE-2026-92450","url":"https://www.first.org/epss/","probability":0.00375,"percentile":0.31519,"date":"2026-11-01","checkedAt":"2026-11-02T12:50:32.655Z"},{"source":"NVD","id":"CVE-2026-92450","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92450","modified":"2026-10-23T19:57:42.660","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-02T12:50:32.655Z"},{"source":"NVD","id":"CVE-2026-92450","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92450","modified":"2026-10-23T19:57:42.660","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-02T12:50:32.655Z"},{"source":"ENISA EUVD","id":"EUVD-2026-108550","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108550","modified":"Oct 22, 2026, 10:09:58 PM","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","checkedAt":"2026-11-02T12:50:32.655Z"}],"aiSummary":{"text":"Kiloview E3 NDI encoder firmware uses hard-coded credentials, allowing an attacker with access to the firmware to forge session tokens and gain unauthenticated access to privileged functions. Affected versions are prior to 1.30. The weakness is due to the use of a static HMAC-SHA256 secret.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-02T12:46:04.450Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-92450"}]}}