Is CVE-2026-107861 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-107861

Kiloview recommends users update to V1.30 immediately: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/. All nine CVEs are addressed in the V1.30 firmware release. Until update is applied, restrict web management API access to trusted networks and enforce strong authentication practices.

Quick answers

What is CVE-2026-107861?: Kiloview recommends users update to V1.30 immediately: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/. All nine CVEs are addressed in the V1.30 firmware release. Until update is applied, restrict web management API access to trusted networks and enforce strong authentication practices.
How severe is CVE-2026-107861?: critical, CVSS 9.1
Is CVE-2026-107861 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-107861 be mitigated?: Kiloview recommends users update to V1.30 immediately: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/. All nine CVEs are addressed in the V1.30 firmware release. Until update is applied, restrict web management API access to trusted networks and enforce strong authentication practices.

CVSS

9.1

Vendor

Kiloview

Published

Oct 23, 2026 · 04:21

Patch

Unknown / not confirmed

Affected products

E3 NDI Encoder, E3 Firmware

Mitigation

Nine Vulnerabilities Discovered in Kiloview E3 NDI Encoder Firmware

CISA and Kiloview have disclosed nine vulnerabilities affecting the E3 NDI Encoder firmware versions prior to 1.30. The flaws range from OS command injection and missing authentication to insufficient session expiration and hard-coded credentials. Successful exploitation could allow an attacker to execute arbitrary commands as root, exfiltrate device identifiers, maintain persistent access via non-expiring tokens, and fully compromise the device. Kiloview has released firmware version 1.30 addressing all nine CVEs.

11m

CVE-2026-107861

Quick answers

Related News

Nine Vulnerabilities Discovered in Kiloview E3 NDI Encoder Firmware