Live › vulnerability › CVE-2026-96616
Go to dashboardKiloview E3 NDI Encoder firmware before 1.30 issues web management login tokens with an expiry far beyond a reasonable session length (CWE-613), so a captured token stays usable for a long time.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Kiloview E3 Firmware | vendor | < 1.30 | 1.30 |
Open the E3 web management UI (System/About page) and read the firmware version; anything below 1.30 is affected.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.
This page as .md · .json · in your agent: get_signal("CVE-2026-96616")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.