CVE-2026-110491
E3 Firmware: Kiloview E3 NDI Encoder NULL Pointer Dereference
Kiloview E3 Firmware
CVSS
7.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.39%Chance of exploitation activity in the next 30 days, higher than 31% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 1.30E3 FirmwareCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Reports 1
1 outlet mention it. Reports are not confirmation; each links to its source.
Description
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be triggered repeatedly by any unauthenticated party with network access to the device.
Text from CVE List
Affected versions 2
- E3 Firmwareaffected: all versions before 1.30CVE List
- E3 Firmwareunaffected: 1.30CVE List