Description
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ANGEET | ES3 KVM | — | — |
Advisories 1
- VA-26-076-01 Multiple IP-KVM Vulnerabilities CISA ICS & IT advisories · Mar 24, 2026