Voltronicpower

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Voltronicpower product.

RSS Feeds for Voltronicpower security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Voltronicpower products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Voltronicpower Sorted by Most Security Vulnerabilities since 2018

Voltronicpower Viewpower22 vulnerabilities

Voltronicpower Snmp Web Pro6 vulnerabilities

By the Year

In 2026 there have been 3 vulnerabilities in Voltronicpower with an average score of 8.9 out of ten. Voltronicpower did not have any published security vulnerabilities last year. That is, 3 more vulnerabilities have already been reported in 2026 as compared to last year.

Year	Vulnerabilities	Average Score
2026	3	8.90
2025	0	0.00
2024	22	7.50
2023	3	8.57

It may take a day or so for new Voltronicpower vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Voltronicpower Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-44402	Sep 04, 2026	Voltronic Power SNMP Web Pro 1.1 Upload.cgi RCE via Crafted Tar Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a malicious tar archive containing arbitrary executable files that are extracted to a privileged directory and executed as root, achieving full system compromise.	Snmp Web Pro
CVE-2026-22199	Mar 13, 2026	wpDiscuz <7.6.47 vote manipulation via nonce reuse & header spoof Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to read arbitrary files on the device filesystem by supplying directory traversal sequences in the params parameter. Attackers can exploit this vulnerability to disclose sensitive files such as password hashes, which can be cracked offline to obtain root-level access and enable full system compromise.	Snmp Web Pro
CVE-2026-22192	Mar 13, 2026	wpDiscuz <7.6.47 Stored XSS via customCss in options import Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipulating browser localStorage values. Attackers can modify client-side authentication state to bypass server-side access controls and gain unauthorized access to protected management functionality without valid credentials.	Snmp Web Pro
CVE-2023-51584	May 03, 2024	Voltronic Power ViewPower Pro USBCommEx: RCE via Exposed Shutdown Method Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit this vulnerability in that an administrator must trigger a shutdown operation. The specific flaw exists within the shutdown method. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22065.	Viewpower
CVE-2023-51585	May 03, 2024	Voltronic Power ViewPower USBCommEx Shutdown Command Injection RCE Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit this vulnerability in that an administrator must trigger a shutdown operation. The specific flaw exists within the shutdown method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22071.	Viewpower
CVE-2023-51583	May 03, 2024	RCE via Exposed Dangerous Method in Voltronic Power ViewPower UpsScheduler Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpsScheduler class. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22036.	Viewpower
CVE-2023-51582	May 03, 2024	Voltronic Power ViewPower RCE via Exposed LinuxMonitorConsole Method Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability. The specific flaw exists within the LinuxMonitorConsole class. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22035.	Viewpower
CVE-2023-51581	May 03, 2024	Voltronic Power ViewPower RCE via Exposed MacMonitorConsole Method Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MacMonitorConsole class. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22034.	Viewpower
CVE-2023-51579	May 03, 2024	Local PrivEsc via Incorrect Perms in Voltronic Power ViewPower Installer Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions set on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22025.	Viewpower
CVE-2023-51576	May 03, 2024	Voltronic Power ViewPower RMI Deserialization RCE Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RMI interface, which listens on TCP port 51099 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22012.	Viewpower