CVE Intelligence

ANGEET ES3 KVM vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting ANGEET ES3 KVM: 2 record(s), with affected versions and fixes.

CVE-2026-32298 Critical · 9.1 CWE-78 Mar 17, 2026
Angeet ES3 KVM OS command injection
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.
CVE-2026-32297 High · 7.5 CWE-306 Mar 17, 2026
Angeet ES3 KVM unauthenticated arbitrary file write
The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries. Modified configuration files or system binaries could allow an attacker to take complete control of a vulnerable system.