ANGEET vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ANGEET products: 2 record(s), with severity, exploitation and fixes.

Es3 Kvm Firmware 2 ES3 KVM 2

Exploited only (KEV) →

CVE-2026-32298 Critical · 9.1 CWE-78 Mar 17, 2026

Angeet ES3 KVM OS command injection

The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.

CVE-2026-32297 High · 7.5 CWE-306 Mar 17, 2026

Angeet ES3 KVM unauthenticated arbitrary file write

The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries. Modified configuration files or system binaries could allow an attacker to take complete control of a vulnerable system.