Unauthorized Configuration Access in Kiloview E3 NDI Encoder Firmware

CVE-2026-110825

What is CVE-2026-110825?

The ONVIF service on the Kiloview E3 NDI encoder firmware exhibits a serious vulnerability that allows unauthorized write operations for hostname, DNS, and NTP configurations. This occurs without the need for authentication, irrespective of preceding security settings. An attacker can exploit this flaw remotely, enabling them to change device settings and potentially lead to further security breaches, such as traffic interception or bypassing certificate validation. These vulnerabilities put users at risk by undermining the integrity and availability of their networking services.

References