CVE-2026-105265
CVE-2026-105265 · Kiloview E3 NDI Encoder Path Traversal
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory .
CVSS 6.0 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
e3 firmware
- Versions
- ≥ 0, < 1.30: Affected (custom)
- 1.30: Not affected
Update to 1.30