CVE-2026-110243 INCIBE-CERT - Vulnerabilities RSS / 1d Gravedad 3.1 (CVSS 3.1 Base Score) Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

www.incibe.es • October 24, 2026

Puntuación base: 9.40 CRÍTICA Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Vector de acceso (AV): A través de red Complejidad de acceso (AC): Bajo Attack Requirements (AT): Ninguno Privilegios Requeridos (PR): Bajo Interacción del usuario (UI): Ninguno Confidentiality (VC): Alto Integrity (VI): Alto Availability (VA): Alto Confidentiality (SC): Alto Integrity (SI): Alto Availability (SA): Alto

Puntuación base: 9.90 CRÍTICA Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Vector de acceso (AV): A través de red Complejidad de acceso (AC): Bajo Privilegios Requeridos (PR): Bajo Interacción del usuario (UI): Ninguno Alcance (S): Modificado Impacto a la confidencialidad (C): Alto Impacto a la integridad (I): Alto Impacto a la disponibilidad (A): Alto

Referencias a soluciones, herramientas e información

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Kiloview E3 NDI Encoder Exposed CISA has issued an advisory detailing nine vulnerabilities in the Kiloview E3 NDI Encoder, with two command injection flaws rated CVSS 9.9, allowing attackers to execute arbitrary commands as root. The affected firmware versions are those below 1.30, and the vulnerabilities include CVE-2026-110243 and CVE-2026-107861. These flaws arise from improper validation of inputs, enabling unauthorized command execution. The vulnerabilities impact critical infrastructure sectors such as communications and information technology. Kiloview recommends users update to firmware version 1.30 to mitigate these risks. As of now, there is no evidence of or public proof-of-concept code. The advisory emphasizes the need for restricted access to the network management service and its configuration endpoints. 2 sources 71

Extracted Entities

CVEs (1)

CVE-2026-110243