CVE-2026-110491: CWE-476 in Kiloview E3 Firmware

The Kiloview E3 firmware contains a vulnerability identified as CVE-2026-110491 (CWE-476) where the ONVIF service can be rendered unresponsive by sending malformed or incomplete requests to certain operations. This causes the ONVIF service to stop accepting new connections temporarily, although the device continues to operate normally otherwise. The service eventually recovers automatically. The vulnerability can be exploited repeatedly by unauthenticated parties with network access to the device. The affected versions are firmware versions greater than or equal to 0 and less than 1.30. The CVSS v3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability.

An attacker with network access can repeatedly send malformed or incomplete requests to the ONVIF service, causing it to become unresponsive and deny new connections temporarily. This results in a denial-of-service condition affecting the ONVIF service availability, although the rest of the device remains functional. There is no impact on confidentiality or integrity.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, network access to the ONVIF service should be restricted to trusted parties to reduce exposure.