Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-32298

Angeet ES3 KVM OS command injection

The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Angeet
Products
Es3 Kvm Es3 Kvm Firmware
CVE-2026-32297

Angeet ES3 KVM unauthenticated arbitrary file write

The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries. Modified configuration files or system binaries could allow an attacker to take complete control of a vulnerable system.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Angeet
Products
Es3 Kvm Es3 Kvm Firmware