CVE-2026-105265
Kiloview E3 NDI Encoder Path Traversal
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Kiloview E3 NDI encoder, a video encoding device, is affected by this vulnerability. An authenticated user could exploit improper input validation in the time zone setting to point the system's local time file at a file outside the intended directory, potentially allowing unauthorized access to or manipulation of files on the device.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory .
Affected versions
- Kiloview E3 Firmware
fixed in 1.30