Export limit exceeded: 425871 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-32298

Angeet ES3 KVM OS command injection

The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Angeet
Products
Es3 Kvm Es3 Kvm Firmware
CVE-2026-32297

Angeet ES3 KVM unauthenticated arbitrary file write

The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries. Modified configuration files or system binaries could allow an attacker to take complete control of a vulnerable system.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Angeet
Products
Es3 Kvm Es3 Kvm Firmware