Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-32298

Angeet ES3 KVM OS command injection

Description

The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ANGEET ES3 KVM

Default version status: unknown

  • 0 to < *affected

References