Is CVE-2026-110243 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-110243 being exploited in the wild.

How severe is CVE-2026-110243?

Critical severity, with a CVSS score of 9.1, published 22 October 2026.

Which products and versions are affected?

Kiloview E3 NDI Encoder firmware < 1.30.

Is there a fix for CVE-2026-110243?

Yes: fixed in E3 Firmware 1.30 and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-110243 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-110243?

Check whether you run Kiloview E3 NDI Encoder at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-110243: Kiloview E3 NDI Encoder multiple critical vulnerabilities

Q: Is there a fix for CVE-2026-110243?

Yes: fixed in E3 Firmware 1.30 and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-110243 attacked?

It is attacked over the network, in a network appliance.

Q: Am I affected by CVE-2026-110243?

Check whether you run Kiloview E3 NDI Encoder at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-110243 · Severity: critical · CVSS 9.1 · Published 2026-10-22

The Kiloview E3 NDI Encoder, used for video encoding and streaming in broadcast and AV production environments, contains nine critical vulnerabilities including command injection, missing authentication, and hard-coded credentials. An attacker can gain complete control of the device, disrupting video production, accessing sensitive content, or using the device as a foothold into broadcast networks.

Technologies: Kiloview E3 NDI Encoder. Vendors: Kiloview.

Quick answers

Is CVE-2026-110243 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-110243 being exploited in the wild.
How severe is CVE-2026-110243?: Critical severity, with a CVSS score of 9.1, published 22 October 2026.
Which products and versions are affected?: Kiloview E3 NDI Encoder firmware < 1.30.
Is there a fix for CVE-2026-110243?: Yes: fixed in E3 Firmware 1.30 and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-110243 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-110243?: Check whether you run Kiloview E3 NDI Encoder at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: E3 Firmware 1.30 and later

Technical details

The vulnerabilities include OS command injection, missing authentication for critical functions, path traversal, null pointer dereference, use of hard-coded credentials, and insufficient session expiration. These flaws allow unauthenticated network access to compromise device functionality and potentially execute arbitrary code with full device privileges.

Affected products

Kiloview E3 NDI Encoder firmware < 1.30

Identifiers

CVE-2026-110243
CVE-2026-96616
CVE-2026-105265
CVE-2026-92450
CVE-2026-110825
CVE-2026-111100
CVE-2026-107861
CVE-2026-110491
CVE-2026-109122

Timeline

2026-10-22: advisory

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.