{"schema_version":1,"title":"Eaton vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in Eaton: 0 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-41022, was published on 27 October 2026. 3 vulnerabilities in the last four weeks, up from none in the four before. 3 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/eaton","json_url":"https://junglewise.ai/threats/vendors/eaton.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/eaton","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":9,"all_time":16,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":3,"last_90_days":3,"last_365_days":16},"latest":[{"cve":"CVE-2026-41022","cvss":5.9,"slug":"cve-2026-41022-eaton-easysoft-improperly-validates-tls-certificates-presented-by","title":"Eaton easySoft improper TLS certificate validation","severity":"medium","exploited":false,"published_at":"2026-10-27T12:17:07.937+00:00","url":"https://junglewise.ai/threats/cve-2026-41022-eaton-easysoft-improperly-validates-tls-certificates-presented-by"},{"cve":"CVE-2026-41021","cvss":7.5,"slug":"cve-2026-41021-eaton-easye4-uses-an-insufficiently-strong-password-policy-an","title":"Eaton easyE4 weak password policy offline attack","severity":"high","exploited":false,"published_at":"2026-10-27T12:17:07.813+00:00","url":"https://junglewise.ai/threats/cve-2026-41021-eaton-easye4-uses-an-insufficiently-strong-password-policy-an"},{"cve":"CVE-2026-41020","cvss":7.5,"slug":"cve-2026-41020-eaton-easye4-uses-a-static-nonce-during-authentication-which","title":"Eaton easyE4 static nonce authentication bypass","severity":"high","exploited":false,"published_at":"2026-10-27T12:17:07.67+00:00","url":"https://junglewise.ai/threats/cve-2026-41020-eaton-easye4-uses-a-static-nonce-during-authentication-which"},{"cve":"CVE-2026-22622","cvss":8.8,"slug":"cve-2026-22622-eaton-tripp-lite-padm-privilege-escalation-in-session-management","title":"Eaton Tripp Lite PADM privilege escalation in session management interface","severity":"high","exploited":false,"published_at":"2026-07-30T11:16:27.397+00:00","url":"https://junglewise.ai/threats/cve-2026-22622-eaton-tripp-lite-padm-privilege-escalation-in-session-management"},{"cve":"CVE-2026-22621","cvss":8.3,"slug":"cve-2026-22621-eaton-tripp-lite-series-padm-command-injection-in-session","title":"Eaton Tripp Lite Series PADM command injection in session management interface","severity":"high","exploited":false,"published_at":"2026-07-30T11:16:27.28+00:00","url":"https://junglewise.ai/threats/cve-2026-22621-eaton-tripp-lite-series-padm-command-injection-in-session"},{"cve":"CVE-2026-22620","cvss":8.6,"slug":"cve-2026-22620-eaton-tripp-lite-padm-authentication-bypass-via-sql-injection","title":"Eaton Tripp Lite PADM authentication bypass via SQL injection","severity":"high","exploited":false,"published_at":"2026-07-30T11:16:27.13+00:00","url":"https://junglewise.ai/threats/cve-2026-22620-eaton-tripp-lite-padm-authentication-bypass-via-sql-injection"},{"cve":"CVE-2026-22619","cvss":7.8,"epss":0.0032,"slug":"cve-2026-22619-eaton-intelligent-power-protector-ipp-is-affected-by-insecure","title":"Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to…","severity":"high","exploited":false,"published_at":"2026-04-16T06:16:10.413+00:00","url":"https://junglewise.ai/threats/cve-2026-22619-eaton-intelligent-power-protector-ipp-is-affected-by-insecure"},{"cve":"CVE-2026-22618","cvss":5.9,"epss":0.0023,"slug":"cve-2026-22618-a-security-misconfiguration-was-identified-in-eaton-intelligent","title":"A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header…","severity":"medium","exploited":false,"published_at":"2026-04-16T06:16:10.297+00:00","url":"https://junglewise.ai/threats/cve-2026-22618-a-security-misconfiguration-was-identified-in-eaton-intelligent"},{"cve":"CVE-2026-22617","cvss":5.7,"epss":0.0017,"slug":"cve-2026-22617-eaton-intelligent-power-protector-ipp-uses-an-insecure-cookie","title":"Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based…","severity":"medium","exploited":false,"published_at":"2026-04-16T06:16:08.98+00:00","url":"https://junglewise.ai/threats/cve-2026-22617-eaton-intelligent-power-protector-ipp-uses-an-insecure-cookie"},{"cve":"CVE-2026-22616","cvss":6.5,"epss":0.0032,"slug":"cve-2026-22616-eaton-intelligent-power-protector-ipp-software-allows-repeated","title":"Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface…","severity":"medium","exploited":false,"published_at":"2026-04-16T05:16:14.563+00:00","url":"https://junglewise.ai/threats/cve-2026-22616-eaton-intelligent-power-protector-ipp-software-allows-repeated"},{"cve":"CVE-2026-22615","cvss":6,"epss":0.0034,"slug":"cve-2026-22615-due-to-improper-input-validation-in-one-of-the-eaton-intelligent","title":"Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an…","severity":"medium","exploited":false,"published_at":"2026-04-16T05:16:14.433+00:00","url":"https://junglewise.ai/threats/cve-2026-22615-due-to-improper-input-validation-in-one-of-the-eaton-intelligent"},{"cve":"CVE-2026-22614","cvss":6.1,"epss":0.0001,"slug":"cve-2026-22614-eaton-easysoft-insecure-encryption-in-project-files","title":"Eaton EasySoft insecure encryption in project files","severity":"medium","exploited":false,"published_at":"2026-03-10T18:18:12.42+00:00","url":"https://junglewise.ai/threats/cve-2026-22614-eaton-easysoft-insecure-encryption-in-project-files"},{"cve":"CVE-2025-67450","cvss":7.8,"epss":0.0015,"slug":"cve-2025-67450-due-to-insecure-library-loading-in-the-eaton-ups-companion","title":"Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the…","severity":"high","exploited":false,"published_at":"2025-12-26T07:15:45.85+00:00","url":"https://junglewise.ai/threats/cve-2025-67450-due-to-insecure-library-loading-in-the-eaton-ups-companion"},{"cve":"CVE-2025-59888","cvss":6.7,"epss":0.0019,"slug":"cve-2025-59888-improper-quotation-in-search-paths-in-the-eaton-ups-companion","title":"Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code…","severity":"medium","exploited":false,"published_at":"2025-12-26T07:15:45.693+00:00","url":"https://junglewise.ai/threats/cve-2025-59888-improper-quotation-in-search-paths-in-the-eaton-ups-companion"},{"cve":"CVE-2025-59887","cvss":8.6,"epss":0.0026,"slug":"cve-2025-59887-improper-authentication-of-library-files-in-the-eaton-ups","title":"Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code…","severity":"high","exploited":false,"published_at":"2025-12-26T07:15:45.047+00:00","url":"https://junglewise.ai/threats/cve-2025-59887-improper-authentication-of-library-files-in-the-eaton-ups"},{"cve":"CVE-2025-59886","cvss":8.8,"epss":0.0032,"slug":"cve-2025-59886-improper-input-validation-at-one-of-the-endpoints-of-eaton","title":"Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker…","severity":"high","exploited":false,"published_at":"2025-12-23T12:15:45.17+00:00","url":"https://junglewise.ai/threats/cve-2025-59886-improper-input-validation-at-one-of-the-endpoints-of-eaton"}],"vendor":{"hub":true,"name":"Eaton","slug":"eaton","homepage":"https://www.eaton.com/","description":"Eaton manufactures electrical, hydraulic, and mechanical power management products and services.","url":"https://junglewise.ai/threats/vendors/eaton"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2025-59886","cvss":8.8,"epss":0.0032,"slug":"cve-2025-59886-improper-input-validation-at-one-of-the-endpoints-of-eaton","title":"Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker…","severity":"high","exploited":false,"published_at":"2025-12-23T12:15:45.17+00:00","url":"https://junglewise.ai/threats/cve-2025-59886-improper-input-validation-at-one-of-the-endpoints-of-eaton"},{"cve":"CVE-2026-22622","cvss":8.8,"slug":"cve-2026-22622-eaton-tripp-lite-padm-privilege-escalation-in-session-management","title":"Eaton Tripp Lite PADM privilege escalation in session management interface","severity":"high","exploited":false,"published_at":"2026-07-30T11:16:27.397+00:00","url":"https://junglewise.ai/threats/cve-2026-22622-eaton-tripp-lite-padm-privilege-escalation-in-session-management"},{"cve":"CVE-2025-59887","cvss":8.6,"epss":0.0026,"slug":"cve-2025-59887-improper-authentication-of-library-files-in-the-eaton-ups","title":"Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code…","severity":"high","exploited":false,"published_at":"2025-12-26T07:15:45.047+00:00","url":"https://junglewise.ai/threats/cve-2025-59887-improper-authentication-of-library-files-in-the-eaton-ups"},{"cve":"CVE-2026-22620","cvss":8.6,"slug":"cve-2026-22620-eaton-tripp-lite-padm-authentication-bypass-via-sql-injection","title":"Eaton Tripp Lite PADM authentication bypass via SQL injection","severity":"high","exploited":false,"published_at":"2026-07-30T11:16:27.13+00:00","url":"https://junglewise.ai/threats/cve-2026-22620-eaton-tripp-lite-padm-authentication-bypass-via-sql-injection"},{"cve":"CVE-2026-22621","cvss":8.3,"slug":"cve-2026-22621-eaton-tripp-lite-series-padm-command-injection-in-session","title":"Eaton Tripp Lite Series PADM command injection in session management interface","severity":"high","exploited":false,"published_at":"2026-07-30T11:16:27.28+00:00","url":"https://junglewise.ai/threats/cve-2026-22621-eaton-tripp-lite-series-padm-command-injection-in-session"},{"cve":"CVE-2026-22619","cvss":7.8,"epss":0.0032,"slug":"cve-2026-22619-eaton-intelligent-power-protector-ipp-is-affected-by-insecure","title":"Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to…","severity":"high","exploited":false,"published_at":"2026-04-16T06:16:10.413+00:00","url":"https://junglewise.ai/threats/cve-2026-22619-eaton-intelligent-power-protector-ipp-is-affected-by-insecure"},{"cve":"CVE-2025-67450","cvss":7.8,"epss":0.0015,"slug":"cve-2025-67450-due-to-insecure-library-loading-in-the-eaton-ups-companion","title":"Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the…","severity":"high","exploited":false,"published_at":"2025-12-26T07:15:45.85+00:00","url":"https://junglewise.ai/threats/cve-2025-67450-due-to-insecure-library-loading-in-the-eaton-ups-companion"},{"cve":"CVE-2026-41021","cvss":7.5,"slug":"cve-2026-41021-eaton-easye4-uses-an-insufficiently-strong-password-policy-an","title":"Eaton easyE4 weak password policy offline attack","severity":"high","exploited":false,"published_at":"2026-10-27T12:17:07.813+00:00","url":"https://junglewise.ai/threats/cve-2026-41021-eaton-easye4-uses-an-insufficiently-strong-password-policy-an"},{"cve":"CVE-2026-41020","cvss":7.5,"slug":"cve-2026-41020-eaton-easye4-uses-a-static-nonce-during-authentication-which","title":"Eaton easyE4 static nonce authentication bypass","severity":"high","exploited":false,"published_at":"2026-10-27T12:17:07.67+00:00","url":"https://junglewise.ai/threats/cve-2026-41020-eaton-easye4-uses-a-static-nonce-during-authentication-which"},{"cve":"CVE-2025-59888","cvss":6.7,"epss":0.0019,"slug":"cve-2025-59888-improper-quotation-in-search-paths-in-the-eaton-ups-companion","title":"Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code…","severity":"medium","exploited":false,"published_at":"2025-12-26T07:15:45.693+00:00","url":"https://junglewise.ai/threats/cve-2025-59888-improper-quotation-in-search-paths-in-the-eaton-ups-companion"}],"generated_at":"2026-11-10T03:07:00.198065+00:00","technologies":[{"name":"Eaton Intelligent Power Protector","slug":"intelligent-power-protector","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/intelligent-power-protector"},{"name":"Eaton easyE4","slug":"easye4","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/easye4"},{"name":"Eaton Ups Companion","slug":"ups-companion","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ups-companion"}]}