2026-03-17 17:21:56
cisa-cg
PUBLISHED
The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the cfg.lua script, allowing an authenticated attacker to execute OS-level commands.