Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110825— Kiloview E3 NDI Encoder Missing Authentication for Critical Function

Quick assessment

Affected
Kiloview E3 Firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

受影响的 Kiloview E3 NDI 编码器固件中的 ONVIF 设备服务，无论该服务是否配置了身份验证，均接受无需认证的主机名、DNS 和 NTP 配置写入操作。远程未认证攻击者可借此修改设备主机名、重定向 DNS 解析或更改已配置的时间源，从而为后续攻击（如流量拦截或证书验证绕过）创造条件。

CVSS 7.5 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-110825

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Kiloview E3 NDI Encoder Missing Authentication for Critical Function
Source: CVE Program / CVE List V5
Vulnerability Description
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the device hostname, redirect DNS resolution, or modify the configured time source, enabling follow on attacks such as traffic interception or certificate validation bypass.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Kiloview E3 Firmware 0 ~ 1.30 -

II. Public POCs for CVE-2026-110825

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110825

请登录查看更多情报信息。

Other References for CVE-2026-110825 (3)

Same Patch Batch · Kiloview · 2026-10-22 · 9 CVEs total

CVE-2026-107861 9.9 CRITICAL Kiloview E3 NDI Encoder OS Command Injection
CVE-2026-110243 9.9 CRITICAL Kiloview E3 NDI Encoder OS Command Injection
CVE-2026-109122 9.1 CRITICAL Kiloview E3 NDI Encoder OS Command Injection
CVE-2026-92450 7.5 HIGH Kiloview E3 NDI Encoder Use of Hard-coded Credentials
CVE-2026-110491 7.5 HIGH Kiloview E3 NDI Encoder NULL Pointer Dereference
CVE-2026-96616 6.5 MEDIUM Kiloview E3 NDI Encoder Insufficient Session Expiration
CVE-2026-111100 5.3 MEDIUM Kiloview E3 NDI Encoder Missing Authentication for Critical Function
CVE-2026-105265 5.3 MEDIUM Kiloview E3 NDI Encoder Path Traversal

IV. Related Vulnerabilities

Same product: E3 Firmware
Same vendor: Kiloview
Same weakness: CWE-306

V. Comments for CVE-2026-110825

No comments yet

Leave a comment