Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| High | 8.7 | CVE-2026-92450 |
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the...
KiloviewKiloview E3 Firmware
|
NVD | |||
|
CVE-2026-92450The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the...
Executive summaryThe advisory covers Kiloview E3 NDI encoder firmware versions below 1.30, which contain multiple flaws that could let an attacker fully take over the device, including command injection, forged login tokens, and missing authentication on some network services. CISA rates the most serious issues as critical, with CVSS scores up to 9.9, and states that successful exploitation could allow full device compromise. The vendor recommends updating the firmware to V1.30, and CISA notes that no known public exploitation has been reported to it. Technical summaryThe flaws include OS command injection (CWE-78) in the network management and system control services, which lets an authenticated web user run commands as root, and hardcoded credentials (CWE-798) in which a shared HMAC-SHA256 JWT signing secret can be recovered from public firmware to forge administrative tokens. Other issues include missing authentication on ONVIF services (CWE-306) that can expose user accounts or alter hostname, DNS, and NTP settings without login, a NULL pointer dereference (CWE-476) that can make the ONVIF service unresponsive, insufficient session expiration (CWE-613), and path traversal (CWE-22) through the time zone parameter. Affected versions are stated as firmware less than 1.30, and the fixed version is V1.30. The advisory gives no workaround beyond the general network segmentation and VPN guidance from CISA, and it does not state specific detection signatures or log indicators. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/cisagov/CSAF/blob/develop/cs…/icsa-26-295-01.json Impact if exploitedConfidentialityHigh IntegrityNone AvailabilityNone
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 8.7 | CVE-2026-110825 |
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless...
KiloviewKiloview E3 Firmware
|
NVD | |||
|
CVE-2026-110825The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless...
Executive summaryThe advisory covers Kiloview E3 NDI encoder firmware earlier than version 1.30, which contains many vulnerabilities, including several that let attackers take full control of the device. The most serious one for this CVE lets a remote, unauthenticated attacker change the device hostname, DNS settings, or time source through the ONVIF service, which could enable traffic interception or certificate validation bypass. The vendor recommends updating the firmware to V1.30. Technical summaryCVE-2026-110825 is classified as CWE-306, Missing Authentication for Critical Function, in the ONVIF device service, which accepts hostname, DNS, and NTP configuration write operations without authentication regardless of the device's configured authentication setting. The advisory describes the attack vector as network-based and requires no privileges or user interaction, and it scores the CVE at CVSS 3.1 7.5 (HIGH) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. Affected firmware is listed as Kiloview E3 Firmware versions <1.30, and the fix is update to V1.30 per the vendor link. No workaround beyond updating is stated, and no detection guidance specific to this CVE is stated, though the advisory gives general network segmentation and remote access recommendations. The advisory also states that no known public exploitation specifically targeting these vulnerabilities has been reported to CISA. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/cisagov/CSAF/blob/develop/cs…/icsa-26-295-01.json Impact if exploitedConfidentialityNone IntegrityHigh AvailabilityNone
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.9 | CVE-2026-110491 |
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations
KiloviewKiloview E3 Firmware
|
NVD | |||
|
CVE-2026-110491The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations
Executive summaryCISA's advisory ICSA-26-295-01 covers the Kiloview E3 NDI Encoder firmware at versions below 1.30, which contains multiple vulnerabilities. The advisory states that successful exploitation could allow an attacker to fully compromise the device, and it recommends updating to version V1.30 as the vendor advises. Technical summaryThe advisory lists about ten CVEs in the E3 firmware, including OS command injection (CWE-78) in the network management and system control services that can run commands as root by an authenticated web user, missing authentication on ONVIF services (CWE-306) that exposes device and user information or allows changes to hostname, DNS and NTP settings, hard-coded HMAC-SHA256 signing secret for session tokens (CWE-798), insufficient session expiration (CWE-613), path traversal via the time zone parameter (CWE-22), and a NULL pointer dereference in the ONVIF service (CWE-476) that makes it unresponsive. CVSS v3.1 base scores in the advisory range from 5.3 to 9.9, with the highest being 9.9 for two command injection flaws. The advisory states that the affected firmware is any version below 1.30 and that KiloView recommends updating to V1.30. No workarounds beyond general network segmentation and VPN guidance are described as specific fixes, and no detection guidance specific to these flaws is stated. The advisory states no known public exploitation has been reported to CISA. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/cisagov/CSAF/blob/develop/cs…/icsa-26-295-01.json Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Critical | 9.4 | CVE-2026-110243 |
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration...
KiloviewKiloview E3 Firmware
|
NVD | |||
|
CVE-2026-110243The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration...
Executive summaryThe advisory says Kiloview E3 NDI encoder firmware earlier than 1.30 contains multiple vulnerabilities, several of which allow an attacker to fully compromise the device. The advisory describes the overall impact as full device compromise and rates several flaws as critical, with CVSS scores up to 9.9. The vendor recommends updating the firmware to V1.30. Technical summaryThe advisory covers many flaws, including OS command injection (CWE-78) in the network management service's link maintenance address configuration, where the network interface name is not validated before being passed to a shell command, and the flaw is exploitable by an authenticated web user with permission to configure network settings. Other flaws include missing authentication on ONVIF services (CWE-306), hardcoded JWT signing secrets (CWE-798), and insufficient session expiration (CWE-613). The affected product is Kiloview E3 Firmware versions below 1.30, and the vendor recommends updating to V1.30. The advisory gives no workaround for these flaws beyond the general network segmentation guidance, and it does not state detection guidance specific to these vulnerabilities. For CVE-2026-110243, the CVSS 3.1 base score is 9.9 with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/cisagov/CSAF/blob/develop/cs…/icsa-26-295-01.json Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Critical | 9.4 | CVE-2026-107861 |
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted...
KiloviewKiloview E3 Firmware, Kiloview E3 NDI encoder firmware
|
NVD | |||
|
CVE-2026-107861The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted...
Executive summaryThe advisory covers Kiloview E3 NDI encoder firmware versions below 1.30, which contain a group of flaws, several rated critical, that could let an attacker take full control of the device. The advisory states that the vendor recommends updating the firmware to V1.30, and CISA recommends defensive measures such as keeping control system devices off the internet and behind firewalls. The advisory states that no known public exploitation of these vulnerabilities has been reported to CISA at this time. Technical summaryThe advisory lists several vulnerability classes, including OS command injection (CWE-78) in the hostname parameter of the system control service and in the network interface name of the link maintenance configuration endpoint, both requiring an authenticated web user with the relevant permissions, and a hardcoded HMAC-SHA256 signing secret (CWE-798) that allows forging of session tokens. Other flaws include missing authentication on ONVIF services (CWE-306), insufficient session expiration (CWE-613), path traversal through the time zone parameter (CWE-22), and a NULL pointer dereference in the ONVIF service (CWE-476) that causes a temporary denial of service. The affected version range is stated as <1.30 and the fixed version is V1.30. No workarounds beyond firmware update are stated in the advisory's per-CVE remediation entries, apart from general network segmentation guidance from CISA, and no specific detection guidance is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/cisagov/CSAF/blob/develop/cs…/icsa-26-295-01.json Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X AffectsKiloviewKiloview E3 FirmwareKiloview E3 NDI encoder firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 8.3 | CVE-2026-96616 |
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them...
KiloviewKiloview E3 Firmware, Kiloview E3 NDI Encoder
|
NVD | |||
|
CVE-2026-96616Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them...
Executive summaryThe advisory concerns the Kiloview E3 NDI Encoder, whose firmware versions below 1.30 contain multiple vulnerabilities, including several that allow command execution as root and others that allow unauthenticated access or disruption. The advisory describes successful exploitation as potentially allowing an attacker to fully compromise the device, and the CVE entries carry scores ranging from 5.3 to 9.9 on CVSS v3.1. The vendor recommends updating the firmware to V1.30. Technical summaryThe flaws include OS command injection (CWE-78) in the network management and system control services, reachable by authenticated web users, with the advisory stating commands run as root and the static route malicious configuration persists across reboots. Other issues include missing authentication on the ONVIF service (CWE-306), hard-coded HMAC-SHA256 secret used to sign session JSON Web Tokens (CWE-798), insufficient session expiration (CWE-613), path traversal via the time zone parameter (CWE-22), and a NULL pointer dereference causing ONVIF service denial of service (CWE-476). Affected firmware is listed as Kiloview E3 Firmware versions less than 1.30, and the fix is update to V1.30. The advisory states no workarounds beyond general network isolation and VPN guidance, and it does not state specific detection signatures. It also states no known public exploitation has been reported to CISA at this time. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/cisagov/CSAF/blob/develop/cs…/icsa-26-295-01.json Impact if exploitedConfidentialityHigh IntegrityLow AvailabilityNone
How it is exploited
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.9 | CVE-2026-111100 |
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication
KiloviewKiloview E3 Firmware, Kiloview E3 NDI Encoder
|
NVD | |||
|
CVE-2026-111100The ONVIF device service on the E3 responds to certain informational requests without requiring authentication
Executive summaryCISA's advisory ICSA-26-295-01 covers the Kiloview E3 NDI Encoder, whose firmware versions below 1.30 contain multiple vulnerabilities. The advisory says successful exploitation could allow an attacker to fully compromise the device, and several flaws are rated critical. The vendor recommends updating the firmware to V1.30 and, in general, limiting network exposure of control system devices. Technical summaryThe advisory lists about a dozen CVEs in the E3 firmware, including OS command injection (CWE-78) in the static route and device naming functions that run as root, missing authentication on the ONVIF service (CWE-306), hardcoded HMAC-SHA256 signing secret for session tokens (CWE-798), non-expiring session tokens (CWE-613), path traversal via the time zone parameter (CWE-22), and a NULL pointer dereference causing ONVIF denial of service (CWE-476). The highest listed CVSS v3.1 base score is 9.9 (CVE-2026-107861 and CVE-2026-110243); the stated preconditions vary, with some requiring authenticated web users and others requiring no authentication. Affected versions are stated as less than 1.30, and the fixed version is V1.30. Workarounds beyond updating are not specifically stated, though the advisory gives general guidance to isolate control networks, avoid internet exposure, and use updated VPNs for remote access. No detection guidance specific to these flaws is stated, and the advisory says no known public exploitation has been reported to CISA. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/cisagov/CSAF/blob/develop/cs…/icsa-26-295-01.json Impact if exploitedConfidentialityLow IntegrityNone AvailabilityNone
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Critical | 9.4 | CVE-2026-109122 |
The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web management API
KiloviewKiloview E3 Firmware, Kiloview E3 NDI Encoder
|
NVD | |||
|
CVE-2026-109122The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web management API
Executive summaryCISA's advisory ICSA-26-295-01 covers multiple vulnerabilities in Kiloview E3 NDI Encoder firmware earlier than 1.30. The advisory states that successful exploitation could allow an attacker to fully compromise the device, and several flaws are rated critical. The vendor recommends updating the firmware to V1.30. Technical summaryThe advisory lists about a dozen CVEs, including OS command injection (CWE-78) flaws in the network management and system control services that run commands as root after authenticated web access, a hard-coded HMAC-SHA256 signing secret for session tokens (CWE-798) that can be recovered from public firmware, missing authentication on ONVIF services (CWE-306) that can expose user lists or change hostname, DNS and NTP settings, non-expiring session tokens (CWE-613), path traversal in the time zone parameter (CWE-22), and a NULL pointer dereference in the ONVIF service (CWE-476) that causes temporary denial of service. CVSS v3.1 base scores range from 5.3 to 9.9 as listed. The affected firmware is stated as versions less than 1.30, and the fix is V1.30. The advisory states that no known public exploitation has been reported to CISA, and it does not give detection signatures beyond general monitoring and network isolation guidance. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/cisagov/CSAF/blob/develop/cs…/icsa-26-295-01.json Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.0 | CVE-2026-105265 |
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a...
KiloviewKiloview E3 Firmware, Kiloview E3 NDI Encoder
|
NVD | |||
|
CVE-2026-105265A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a...
Executive summaryThe advisory covers Kiloview E3 NDI encoder firmware versions below 1.30, which contain multiple vulnerabilities, several of which allow remote or authenticated users to run commands as root and fully compromise the device. CISA rates the overall impact as severe, with individual CVSS scores ranging from 5.3 to 9.9, and the vendor recommends updating the firmware to V1.30. Technical summaryThe advisory lists many flaws, including OS command injection (CWE-78) in the network management and system control services that allow authenticated web users to run commands as root, hardcoded HMAC secret for JWT signing (CWE-798), missing authentication on ONVIF services (CWE-306), insufficient session expiration (CWE-613), a NULL pointer dereference causing ONVIF denial of service (CWE-476), and a path traversal (CWE-22) in the time zone parameter that lets an authenticated user point /etc/localtime outside the zoneinfo directory. Affected version is stated as less than 1.30, and the fixed version is V1.30. The vendor's only listed remediation is updating to V1.30; no other workarounds are stated. The advisory does not state any detection guidance, and it states that no known public exploitation has been reported to CISA. CISA recommends network segmentation, minimizing exposure, and following its ICS recommended practices. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/cisagov/CSAF/blob/develop/cs…/icsa-26-295-01.json Impact if exploitedConfidentialityHigh IntegrityNone AvailabilityNone
How it is exploited
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||