CVE-2024-31409: Cyberpower Powerpanel

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Certain MQTT wildcards are not blocked on the CyberPower PowerPanel system, which might result in an attacker obtaining data from throughout the system after gaining access to any device.

Affected products

• Cyberpower Powerpanel: up to and including 4.9.0

Published 2024-05-15. Last modified 2026-06-17.