CVE-2026-111100 Kiloview CVE debrief

Who should care

Defenders in ICS environments, particularly those using Kiloview E3 NDI Encoders, should assess exposure and verify authentication mechanisms to prevent potential credential attacks.

Why it matters

CVE-2026-111100 is a medium-severity vulnerability in Kiloview E3 NDI Encoders that allows unauthenticated access to device identifiers and user account information, potentially aiding in credential attacks and device fingerprinting.

• Potential for device fingerprinting
• Possible credential attacks on vulnerable devices
• Need for authentication mechanism verification
• Importance of updating to version 1.30 or later

Technical summary

The ONVIF device service on Kiloview E3 NDI Encoders responds to certain informational requests without requiring authentication, allowing remote, unauthenticated parties to retrieve detailed device identifiers and a list of configured user accounts with their privilege levels. This vulnerability has a CVSS score of 5.3 and is considered medium-severity. The vulnerability affects Kiloview E3 NDI Encoders and allows whoShouldCare to assess the need for authentication mechanisms and review device identifiers and user account configurations.

Defensive priority

Defenders should prioritize verifying exposure of Kiloview E3 NDI Encoders, especially in ICS environments, and assess the need for authentication mechanisms.

Recommended defensive actions

• Verify exposure of Kiloview E3 NDI Encoders in ICS environments
• Assess the need for authentication mechanisms
• Review device identifiers and user account configurations
• Update to version 1.30 or later if affected
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE record and source item provide details on the vulnerability, including its CVSS score and affected versions. However, the corpus does not establish exploitation or specific impact, requiring verification from official sources. The vulnerability affects Kiloview E3 NDI Encoders and allows remote, unauthenticated parties to retrieve detailed device identifiers and a list of configured user accounts with their privilege levels. Defenders should verify exposure of Kiloview E3 NDI Encoders, especially in ICS environments, and

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.