CVE-2026-96616Medium· 6.5▾ SunlitAuthentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device com…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.
e3_firmware < 1.30KiloView recommends users update to V1.30: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111100Medium· 5.3Kiloview E3 NDI Encoder Missing Authentication for Critical Function
CVE-2026-105265Medium· 5.3Kiloview E3 NDI Encoder Path Traversal
CVE-2026-110491High· 7.5Kiloview E3 NDI Encoder NULL Pointer Dereference
CVE-2026-92450High· 7.5Kiloview E3 NDI Encoder Use of Hard-coded Credentials
CVE-2026-107861Critical· 9.9Kiloview E3 NDI Encoder OS Command Injection
CVE-2026-110243Critical· 9.9Kiloview E3 NDI Encoder OS Command Injection