CVE-2026-111100Medium· 5.3▾ SunlitThe ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and th…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting vulnerable devices and preparing targeted credential attacks.
e3_firmware < 1.30KiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-110825High· 7.5Kiloview E3 NDI Encoder Missing Authentication for Critical Function
CVE-2026-105265Medium· 5.3Kiloview E3 NDI Encoder Path Traversal
CVE-2026-110491High· 7.5Kiloview E3 NDI Encoder NULL Pointer Dereference
CVE-2026-96616Medium· 6.5Kiloview E3 NDI Encoder Insufficient Session Expiration
CVE-2026-92450High· 7.5Kiloview E3 NDI Encoder Use of Hard-coded Credentials
CVE-2026-107861Critical· 9.9Kiloview E3 NDI Encoder OS Command Injection