Kiloview E3 NDI Encoder Vulnerabilities

Kiloview E3 NDI Encoder

Successful exploitation of vulnerabilities in Kiloview E3 NDI Encoder could allow an attacker to fully compromise the device, affecting firmware versions <1.30.

Do this now

Upgrade Kiloview E3 NDI Encoder to V1.30.

Fix it

Upgrade to Kiloview E3 NDI Encoder V1.30

First seen: 22 Oct 2026
Last update: 22 Oct 2026, 12:00 UTC
Fixed in: V1.30
Identifiers: CVE-2026-105265
CVE-2026-107861
CVE-2026-109122
CVE-2026-110243
CVE-2026-110491
CVE-2026-110825
CVE-2026-111100
CVE-2026-92450
CVE-2026-96616
CVSS: 9.9
Source: news
On the menu as: Industrial & OT

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## Kiloview E3 NDI Encoder Vulnerabilities
Severity: critical. Patch status: patched.
Affected: Kiloview E3 NDI Encoder
Fixed in: V1.30
Ids: CVE-2026-105265, CVE-2026-107861, CVE-2026-109122, CVE-2026-110243, CVE-2026-110491, CVE-2026-110825, CVE-2026-111100, CVE-2026-92450, CVE-2026-96616

Successful exploitation of vulnerabilities in Kiloview E3 NDI Encoder could allow an attacker to fully compromise the device, affecting firmware versions <1.30.

## Steps
1. Search the repo, its CI and infra config for Kiloview E3 NDI Encoder. If present, report the version in use and whether it's affected.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2026-105265") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01
https://pwned.coffee/i/kiloview-e3-ndi-encoder-vulnerabilities

Receipt

Exploitation: No known exploitation
CISA “No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.” source
Fix by release line: Product Affected Fixed in Source
Kiloview E3 NDI Encoder before V1.30 V1.30 CISA advisory
Score: CVSS 9.9 (critical). CVSS 3.1 9.9 (CNA icscert) for CVE-2026-107861
Last checked: 24 Oct 2026, 17:17 UTC

Product	Affected	Fixed in	Source
Kiloview E3 NDI Encoder	before V1.30	V1.30	CISA advisory

Sources: KEV – CVE record ✓ Vendor ✓

Sources

cisa.gov: Kiloview E3 NDI Encoder

Totalone very hot coffee