CVE-2024-32736

CVE-2024-32736 is a critical SQL injection vulnerability affecting CyberPower PowerPanel Enterprise versions prior to 2.8.3. An unauthenticated remote attacker can exploit this flaw through the "query_utask_verbose" function in MCUDBHelper to leak sensitive information. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, leading to high confidentiality impact without requiring user interaction. While there is no evidence of active exploitation or public exploit code like Metasploit modules or ExploitDB entries, a Nuclei template exists, and its high EPSS score and FAUCET Risk Score indicate a significant potential for future exploitation. Community discussion and media coverage are currently minimal.