CVE-2019-13071: Cyberpowersystems Powerpanel

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page.

Affected products

• Cyberpowersystems Powerpanel: version 3.4.0 only

Published 2019-07-10. Last modified 2026-06-17.