Approved changes feed: RSS · Atom

cpe:2.3:a:angeet:es3_kvm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAngeet (18dfff9f-5409-5780-bfb5-8fc09ad8061a)
ProductEs3 Kvm (0d39a535-e8a9-5423-a171-b598d7c7da3a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-32298 vulnerable 2026-06-08 07:57:17.386713 Angeet ES3 KVM OS command injection
CRITICAL (9.1)
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.
Published: 2026-03-17T17:21:56.017Z
Updated: 2026-03-17T18:09:21.367Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32297 vulnerable 2026-06-08 07:57:17.384940 Angeet ES3 KVM unauthenticated arbitrary file write
HIGH (7.5)
The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries. Modified configuration files or system binaries could allow an attacker to take complete control of a vulnerable system.
Published: 2026-03-17T17:20:07.456Z
Updated: 2026-03-17T18:09:55.887Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.