CVE-2026-107861Critical· 9.9▾ MidnightThe system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to t…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 54.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary operating system commands as root, resulting in full device compromise.
e3_firmware < 1.30KiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-110243Critical· 9.9Kiloview E3 NDI Encoder OS Command Injection
CVE-2026-109122Critical· 9.1Kiloview E3 NDI Encoder OS Command Injection
CVE-2026-111100Medium· 5.3Kiloview E3 NDI Encoder Missing Authentication for Critical Function
CVE-2026-105265Medium· 5.3Kiloview E3 NDI Encoder Path Traversal
CVE-2026-110491High· 7.5Kiloview E3 NDI Encoder NULL Pointer Dereference
CVE-2026-96616Medium· 6.5Kiloview E3 NDI Encoder Insufficient Session Expiration