Critical Patch available CVSS up to 9.9
Kiloview E3 video encoder has nine flaws that could allow full takeover
CISA ICS AdvisoriesKiloview · Communications, Information TechnologyCVE-2026-109122, CVE-2026-111100, CVE-2026-96616
What happened. Kiloview E3 NDI encoder firmware has nine flaws, including operating system command injection, missing authentication and hard-coded credentials. Successful exploitation could let an attacker fully compromise the device.
Who is affected. Kiloview E3 NDI Encoder firmware before 1.30. Sectors named are communications and information technology.
What to do. Check whether you run Kiloview E3 firmware before 1.30 and update to version 1.30 or later.
Editor's reading
Forasset ownerIT security
- Are you exposed?
Search the asset inventory for Kiloview E3 NDI encoders and check that the firmware version is 1.30 or later.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: CISA ICS Advisories (opens cisa.gov)
More on Telecommunications CVE-2026-109122 CVE-2026-111100 CVE-2026-96616