CVE-2025-9265CWE-287CWE-290CWE-346

CVE-2025-9265

published October 13, 2025

CVSS
10.0
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects

Kiloview NDI N30

and was fixed in Firmware version later than 2.02.0246

The record
Technical detail
CVSS
10.0 · NONE
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Weaknesses
CWE-287 · Improper Authentication; CWE-290 · Authentication Bypass by Spoofing; CWE-346 · Origin Validation Error
Published
2025-10-13T11:15Z
References (1)
https://www.kiloview.com/en/support/download/n30-firmware-downloadlatest/ · [email protected]
EPSS history
Timeline
  • 13 OCT 06:57Z
    API Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products
    cvelistv5