Non-expiring Authentication Tokens in E3 Web Management Interface
CVE-2026-96616
8.3HIGH
What is CVE-2026-96616?
The E3 Web Management Interface by Kiloview issues authentication tokens with expiration times that exceed typical session lifetimes. This flaw allows tokens obtained through network interception or device compromise to remain valid for prolonged periods, posing a significant security risk. Users and administrators should review their authentication mechanisms to mitigate potential exploitation.
Affected Version(s)
E3 Firmware 0 < 1.30
E3 Firmware 1.30
References
CVSS V4
Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Juan Alonso reported this vulnerability to CISA.