Angeet Es3 Kvm Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Angeet Es3 Kvm Firmware: 2 record(s), with affected versions and fixes.
cpe:2.3:o:angeet:es3_kvm_firmware

CVE-2026-32298 Critical · 9.1 CWE-78 Mar 17, 2026

Angeet ES3 KVM OS command injection

The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.

CVE-2026-32297 High · 7.5 CWE-306 Mar 17, 2026

Angeet ES3 KVM unauthenticated arbitrary file write

The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries. Modified configuration files or system binaries could allow an attacker to take complete control of a vulnerable system.