Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
The network management service on Kiloview E3 NDI encoder firmware fails to validate the network interface name parameter in the link maintenance address configuration endpoint before passing it to a shell command. This validation gap, which is not present in similar handlers, allows shell command injection.
An authenticated web user with network configuration permissions can execute arbitrary operating system commands as root on the affected device over the network.
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Update Kiloview E3 firmware to version 1.30 or later. Restrict access to the network management service and its configuration endpoints to trusted administrators only. Implement network segmentation to limit access to the management interface.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Feedly found the first article mentioning CVE-2026-110243 . See article
NVD published the first details for CVE-2026-110243
A CVSS base score of 9.9 has been assigned.
GitHub Advisories released a security advisory .
Kiloview E3 NDI Encoder
35 changes (1 new | 34 updated):
CISA Warns of Nine Kiloview E3 Encoder Flaws, Two at CVSS 9.9
Kiloview E3 NDI Encoder Flaws Allow Root Command Execution, CISA Warns
Be the first to know critical vulnerabilities
Collect, analyze, and vulnerability reports faster using AI
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
