CVE-2026-111100 — Kiloview E3 NDI Encoder Missing Authentication for Critical Function
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device iden…
Published: 2026-10-22 · CVSS: 6.9 · CVSS 4.0
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting vulnerable devices and preparing targeted credential attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7