Vulnerabilidades de ANGEET
CVEs publicadas que afetam produtos de ANGEET: 2 registro(s), com severidade, exploração e correções.
CVE-2026-32298
Crítica · 9.1
CWE-78 17/03/2026
Angeet ES3 KVM OS command injection
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.
CVE-2026-32297
Alta · 7.5
CWE-306 17/03/2026
Angeet ES3 KVM unauthenticated arbitrary file write
The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries. Modified configuration files or system binaries could allow an attacker to take complete control of a vulnerable system.