CVE-2026-110491 Kiloview CVE debrief

Who should care

Defenders of ICS systems, particularly those using Kiloview E3 NDI Encoders, should assess exposure and apply necessary mitigations. This includes verifying and applying firmware updates, restricting access to the ONVIF service, and monitoring for unusual activity. Security teams and operators of affected platforms must review the vulnerability's impact on their environments and prioritize remediation efforts.

Why it matters

CVE-2026-110491 is a NULL pointer dereference vulnerability in the Kiloview E3 NDI Encoder. Defenders of ICS systems should assess exposure and apply necessary mitigations to prevent exploitation.

• Verify and apply firmware updates to prevent exploitation
• Restrict access to the ONVIF service to reduce attack surface
• Monitor for unusual activity to detect potential exploitation attempts

Technical summary

The Kiloview E3 NDI Encoder is affected by a NULL pointer dereference vulnerability. The vulnerability can be triggered by sending malformed or incomplete requests to certain operations of the ONVIF service, which can render the service unresponsive. This issue impacts ICS systems using the affected encoder. Defenders should assess exposure and apply mitigations to prevent exploitation. The vulnerability does not allow for remote code execution but can cause service disruption. Affected parties should verify and apply firmware updates.

Defensive priority

Verify and apply firmware updates

Recommended defensive actions

• Verify and apply firmware updates
• Restrict access to the ONVIF service
• Monitor for unusual activity
• Review compensating controls for exposed systems
• Check relevant monitoring, detection, and logs
• Track exceptions and retest remediated assets
• Confirm whether affected product deployments exist in managed environments

Evidence notes

The CVE record and source item provide details on the vulnerability. The Kiloview E3 NDI Encoder is affected by a NULL pointer dereference vulnerability, which can be triggered by sending malformed or incomplete requests to certain operations of the ONVIF service.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.