As cited
Copy frozen at (site build).
vulnerabilities
Kiloview E3 NDI Encoder
Nine vulnerabilities affecting Kiloview E3 NDI Encoder firmware versions prior to 1.30 range from remote code execution via unsanitized shell commands to missing authentication controls and hardcoded credentials. Exploitation could allow remote or authenticated attackers to achieve full device compromise, including access to stored credentials and cryptographic material. Kiloview recommends updating to firmware version 1.30.
Why it matters: Organizations deploying Kiloview E3 encoders in communications and information technology infrastructure must patch to firmware 1.30 immediately, as multiple critical command injection flaws (CVE-2026-109122, CVE-2026-107861, CVE-2026-110243) and unauthenticated configuration changes (CVE-2026-110825) enable root-level compromise with no known public exploitation reported yet.
- Source published
- First seen by Cybersecurity Tracker