Es3 Kvm Firmware vulnerabilities

2 known vulnerabilities in Es3 Kvm Firmware from Angeet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  ES3 KVM: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-32298Mar 17, 2026Angeet

  The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.

• 7.5 High severity

  ES3 KVM: Missing Authentication for Critical Functionality

  CVE-2026-32297Mar 17, 2026Angeet

  The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries. Modified configuration files or system binaries could allow an attacker to take complete control of a vulnerable system.