CyberPower vendor intelligence

CyberPower Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting CyberPower products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
5
Known exploited vulnerabilities affecting CyberPower products
In CISA KEV
0
Records also listed in the official catalog
Beyond CISA KEV
5
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
0
CyberPower KEVs with sensor-observed exploitation activity

The catalog gap matters for CyberPower exposure

All five exploited CyberPower vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.

0%
Covered by CISA
100%
Beyond CISA
1
Product families

Attested CyberPower vulnerabilities

5 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2024-32738

CyberPower PowerPanel Enterprise SQL Injection

 CyberPower PowerPanel Enterprise High Beyond CISA 15 Jun 2026
CVE-2024-32735

CyberPower PowerPanel Enterprise Missing Authentication

 CyberPower PowerPanel Enterprise High Beyond CISA 10 Jun 2025
CVE-2024-32739

CyberPower PowerPanel Enterprise SQL Injection

 CyberPower PowerPanel Enterprise High Beyond CISA 09 May 2024
CVE-2024-32737

CyberPower PowerPanel Enterprise SQL Injection

 CyberPower PowerPanel Enterprise High Beyond CISA 09 May 2024
CVE-2024-32736

CyberPower PowerPanel Enterprise SQL Injection

 CyberPower PowerPanel Enterprise High Beyond CISA 09 May 2024

Showing 5 of 5 on this page (5 CyberPower known exploited vulnerabilities).

Recurring weakness patterns

Neutralization and missing authentication for critical function account for five mapped occurrences across this CyberPower KEV portfolio.

Browse all KEVs →

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

4

CWE-306

Missing Authentication for Critical Function

1