# CVE-2026-22617: Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based…

Source: https://junglewise.ai/threats/cve-2026-22617-eaton-intelligent-power-protector-ipp-uses-an-insecure-cookie  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-16  
License: CC BY 4.0 with a link back

CVE-2026-22617 · Severity: medium · CVSS 5.7 · Published 2026-04-16

Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.

Technologies: [Eaton Intelligent Power Protector](https://junglewise.ai/threats/technologies/intelligent-power-protector). Vendors: [Eaton](https://junglewise.ai/threats/vendors/eaton).

## Quick answers

**Is CVE-2026-22617 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-22617 being exploited in the wild.

**How severe is CVE-2026-22617?** Medium severity, with a CVSS score of 5.7, published 16 April 2026.

**Which products and versions are affected?** Eaton Intelligent Power Protector. The advisory does not name versions.

**Is there a fix for CVE-2026-22617?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-22617?** Check whether you run Eaton Intelligent Power Protector. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Eaton Intelligent Power Protector

## Related threats

- [Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to…](https://junglewise.ai/threats/cve-2026-22619-eaton-intelligent-power-protector-ipp-is-affected-by-insecure)
- [A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header…](https://junglewise.ai/threats/cve-2026-22618-a-security-misconfiguration-was-identified-in-eaton-intelligent)
- [Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface…](https://junglewise.ai/threats/cve-2026-22616-eaton-intelligent-power-protector-ipp-software-allows-repeated)
- [Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an…](https://junglewise.ai/threats/cve-2026-22615-due-to-improper-input-validation-in-one-of-the-eaton-intelligent)