Filtered by vendor Angeet Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-32298 1 Angeet 1 Es3 Kvm 2026-03-18 9.1 Critical
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.
CVE-2026-32297 1 Angeet 1 Es3 Kvm 2026-03-18 7.5 High
The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries. Modified configuration files or system binaries could allow an attacker to take complete control of a vulnerable system.