Paper/Archive/CVE-2026-22619

CVE-2026-22619

Eaton IPP software — Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code exe…

EPSS 0.3%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (NVD)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 25.4.254 × 205.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the software package. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download center.

Affected

ProductAffectedFixed inSource

IPP software< 2.02.0CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Eaton (CNA)7.8CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refeaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1025.pdf