Description
CyberPower PowerPanel business
application code contains a hard-coded JWT signing key. This could
result in an attacker forging JWT tokens to bypass authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CyberPower | PowerPanel business | < 4.9.0 | 4.9.0 |
Advisories 1
- ICSA-24-123-01 CyberPower PowerPanel Business CISA ICS & IT advisories · Aug 7, 2025