critical9.1
CVE-2026-32298
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level co…
Impact
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Angeet | Es3 Kvm Firmware | All versions |