<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: powerpanel</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-32739: A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated r</title><link>https://patchthecve.com/cve/CVE-2024-32739.html</link><guid>https://patchthecve.com/cve/CVE-2024-32739.html</guid><pubDate>Wed, 17 Jun 2026 07:30:20 +0000</pubDate><description>HIGH 7.5: A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the &quot;query_ptask_verbose&quot; function within MCUDBHelper.
</description></item><item><title>CVE-2024-32738: A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated r</title><link>https://patchthecve.com/cve/CVE-2024-32738.html</link><guid>https://patchthecve.com/cve/CVE-2024-32738.html</guid><pubDate>Wed, 17 Jun 2026 07:30:20 +0000</pubDate><description>HIGH 7.5: A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the &quot;query_ptask_lean&quot; function within MCUDBHelper.
</description></item><item><title>CVE-2024-32737: A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated r</title><link>https://patchthecve.com/cve/CVE-2024-32737.html</link><guid>https://patchthecve.com/cve/CVE-2024-32737.html</guid><pubDate>Wed, 17 Jun 2026 07:30:20 +0000</pubDate><description>HIGH 7.5: A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the &quot;query_contract_result&quot; function within MCUDBHelper.
</description></item><item><title>CVE-2024-32736: A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated r</title><link>https://patchthecve.com/cve/CVE-2024-32736.html</link><guid>https://patchthecve.com/cve/CVE-2024-32736.html</guid><pubDate>Wed, 17 Jun 2026 07:30:20 +0000</pubDate><description>HIGH 7.5: A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the &quot;query_utask_verbose&quot; function within MCUDBHelper.
</description></item><item><title>CVE-2024-32735: An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise pri</title><link>https://patchthecve.com/cve/CVE-2024-32735.html</link><guid>https://patchthecve.com/cve/CVE-2024-32735.html</guid><pubDate>Wed, 17 Jun 2026 07:30:20 +0000</pubDate><description>CRITICAL 9.8: An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application.</description></item></channel></rss>