CVE-2023-25133

Improper privilege management vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to execute operation system commands via unspecified vectors.

• CWE-269
• CWE-269

• https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloadsProduct
• https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloadsProduct
• https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloadsProduct
• https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloadsProduct
• https://zuso.ai/Advisory/Third Party Advisory
• https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloadsProduct
• https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloadsProduct
• https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloadsProduct
• https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloadsProduct
• https://zuso.ai/Advisory/Third Party Advisory

Published

Apr 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25128Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-25129Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-2513A use-after-free vulnerability was found in the Linux kernel…6.7
• CVE-2023-25130Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-25131Use of default password vulnerability in PowerPanel Business…9.8
• CVE-2023-25132Unrestricted upload of file with dangerous type vulnerabilit…9.8
• CVE-2023-25134McAfee Total Protection prior to 16.0.50 may allow an advers…6.7
• CVE-2023-25135vBulletin before 5.6.9 PL1 allows an unauthenticated remote …9.8
• CVE-2023-25136OpenSSH server (sshd) 9.1 introduced a double-free vulnerabi…6.5
• CVE-2023-25139sprintf in the GNU C Library (glibc) 2.37 has a buffer overf…9.8
• CVE-2023-2514Mattermost Sever fails to redact the DB username and passwor…7.5
• CVE-2023-25140A vulnerability has been identified in Parasolid V34.0 (All …7.8