Kiloview E3 Firmware

9 CVEs affecting Kiloview E3 Firmware. Latest disclosed: 2026-10-22. Critical: 3, High: 3.

Top CVEs affecting Kiloview E3 Firmware
CVESeverityScorePublishedSummary
CVE-2026-110243Critical9.92026-10-22The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance addre…
CVE-2026-107861Critical9.92026-10-22The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passin…
CVE-2026-109122Critical9.12026-10-22The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web managem…
CVE-2026-92450High7.52026-10-22The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static…
CVE-2026-110825High7.52026-10-22The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentic…
CVE-2026-110491High7.52026-10-22The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops acceptin…
CVE-2026-96616Medium6.52026-10-22Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively…
CVE-2026-111100Medium5.32026-10-22The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve de…
CVE-2026-105265Medium5.32026-10-22A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime…