← Database

CVE-2026-32298

CRITICAL CVSS: 9.1 Published: 2026-03-17 Modified: 2026-06-17

Description

The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.

Affected Platforms

Angeet Es3 Kvm FirmwareAngeet Es3 Kvm

Weakness Type

CWE-78

References