Live › vulnerability › CVE-2026-110243
Go to dashboardThe network management service on Kiloview E3 NDI encoder firmware passes an unvalidated network interface name into a shell command. An authenticated web user who can change network settings can run arbitrary operating system commands as root.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| Kiloview E3 firmware | vendor | < 1.30 | 1.30 |
Check the firmware version on the device; versions below 1.30 are affected. unknown for any command-line check.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform the same validation. An authenticated web user with permission to configure network settings can exploit this to execute arbitrary operating system commands as root.
This page as .md · .json · in your agent: get_signal("CVE-2026-110243")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.