CyberPower Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for CyberPower products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

5

In CISA KEV

0

Beyond CISA KEV

5

Sensor Observed

0

Virtual Patch Available

0

CyberPower KEVs Added by Year

Loading...

5 CyberPower KEVs added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2024-32738

CyberPower PowerPanel Enterprise SQL Injection

High Not in CISA 15 Jun 2026
CVE-2024-32735

CyberPower PowerPanel Enterprise Missing Authentication

High Not in CISA 10 Jun 2025
CVE-2024-32739

CyberPower PowerPanel Enterprise SQL Injection

High Not in CISA 09 May 2024
CVE-2024-32737

CyberPower PowerPanel Enterprise SQL Injection

High Not in CISA 09 May 2024
CVE-2024-32736

CyberPower PowerPanel Enterprise SQL Injection

High Not in CISA 09 May 2024

Common Vulnerability Classes (CWE)

  • CWE-89 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 4
  • CWE-306 — Missing Authentication for Critical Function 1

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology