Medium severity6.5NVD Advisory· Published Oct 22, 2026
Kiloview E3 NDI Encoder
CVE-2026-96616
Description
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.
Affected products
1Patches
Vulnerability mechanics
News mentions
1- Kiloview E3 NDI EncoderCISA ICS Advisories