3 matches found
CVE-2026-32298
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands...
9.1CVSS6.1AI score0.00662EPSS
SaveExploits0References1
EUVD-2026-12614
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands...
9.1CVSS5.9AI score0.00662EPSS
SaveExploits0References4
CVE-2026-32298: Improper Neutralization of Special Elements used in an OS Command
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands...
9.1CVSS6.1AI score0.00662EPSS
SaveExploits0References1
20