Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

Kiloview E3 firmware before 1.30 allows root command injection

Original title: Kiloview E3 NDI Encoder

CISA Advisoriesby CISA ()9 min read2
Read at cisa.gov
AI summary · x-ai/grok-4.7Summaries by Vani AI

Nine CVEs affect firmware before 1.30, including unauthenticated ONVIF leaks and a denial of service; KiloView's fix is V1.30.

CISA republished an advisory on Kiloview E3 NDI encoder firmware before 1.30. Successful exploitation could fully compromise the device. CVE-2026-109122 lets an authenticated web user who can set static routes inject operating-system commands as root, and the configuration persists across reboots. Other described issues include unauthenticated ONVIF account disclosure, non-expiring login tokens, a time-zone path traversal, and an unauthenticated ONVIF denial of service. KiloView recommends updating to V1.30.

Unconfirmed: The supplied text cuts off while describing CVE-2026-110491 and does not detail every listed CVE.

Key facts
  • CVE-2026-109122 is scored CVSS 3.1 9.1 and CVSS 4.0 9.4, both critical.
  • Command injection can expose stored credentials and cryptographic material.
  • CVE-2026-111100 discloses device identifiers, accounts, and privilege levels without authentication.
  • CVE-2026-96616 issues login tokens that effectively do not expire.
  • CVE-2026-110491 can stop the ONVIF service from accepting new connections until it recovers.
Security assessment · AI, from the article

Impact: Root command execution and full device compromise

ProductAffectedFixed in
Kiloview E3 Firmware<1.30V1.30
What to do
  1. 1.Update Kiloview E3 firmware to V1.30.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
CVEs
CVE-2026-109122CVE-2026-111100CVE-2026-96616CVE-2026-105265CVE-2026-110491CVE-2026-107861CVE-2026-110243CVE-2026-92450CVE-2026-110825
ATT&CK
T1190 Exploit Public-Facing ApplicationT1059 Command and Scripting Interpreter
Tags
kiloviewndifirmwarecommand-injectiononvif
Vendors
Kiloview
Products
E3 NDI EncoderE3 Firmware
Organizations
CISA

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-105265
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime…
6.0—
CVE-2026-107861
+5 related CVEs
CVE-2026-109122CVE-2026-110243CVE-2026-110825CVE-2026-92450CVE-2026-96616
Authenticated command injection in Kiloview E3 NDI encoder
9.4
group max
—
CVE-2026-110491
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations
6.9—
CVE-2026-111100
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication
6.9—

From the original article

9 min read at cisa.gov

View CSAF Summary Successful exploitation of this these vulnerabilities could allow an attacker to fully compromise the device. The following versions of Kiloview E3 NDI Encoder are affected: E3 Firmware <1. 30 (CVE-2026-109122, CVE-2026-111100, CVE-2026-96616, CVE-2026-105265, CVE-2026-110491, CVE-2026-107861, CVE-2026-110243, CVE-2026-92450, CVE-2026-110825) CVSS Vendor Equipment v3 9.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.