CVE-2026-110243
Last modified
CVE-2026-110243 is a critical-severity vulnerability rated 9.9/10 on the CVSS scale. The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform the same validation. An authenticated web user with permission to configure network settings can exploit this to execute arbitrary operating system commands as root..
Description
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform the same validation. An authenticated web user with permission to configure network settings can exploit this to execute arbitrary operating system commands as root.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Kiloview | E3 Firmware | < 1.30 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-110243?
How severe is CVE-2026-110243?
How do I fix CVE-2026-110243?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-110236KDE Dolphin 24.08.0 through 26.08.2 contains an OS command i…7
- CVE-2026-110237Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIF…7.3
- CVE-2026-110238Rapyd Admin from 9.0.0 before 9.20.0 contains an authorizati…8.8
- CVE-2026-110239Rapyd Admin before 9.20.0 contains a stored cross-site scrip…4.4
- CVE-2026-11024Stack buffer overflow in Skia in Google Chrome prior to 149.…8.8
- CVE-2026-110240Lancet through 2.3.9 contains an SSRF protection bypass vuln…4.8
- CVE-2026-110247Several buffer-growth sites in libmime performed size arithm…8.4
- CVE-2026-110248Insertion of sensitive information into log files in the git…5.3
- CVE-2026-110249A malicious, compromised, or MITM-controlled Exchange server…8.6
- CVE-2026-11025Insufficient policy enforcement in Navigation in Google Chro…6.5
- CVE-2026-110252The WPeMatico RSS Feed Fetcher plugin for WordPress is vulne…5.4
- CVE-2026-110253The weForms – Easy Drag & Drop Contact Form Builder For Word…5.4
Are you affected by CVE-2026-110243?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST