CVE-2022-38119: Upspowercom Upsmon Pro

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.

Affected products

Published 2022-11-10. Last modified 2026-06-17.