[ CVE-2026-96616 · Published 22 Oct 2026 ]
Vulnerability in Kiloview E3 Firmware
CVSS 6.5
No fix listed yet
[ Description ]Official description
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.