Eaton vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20191
3. 20205
4. 20218
5. 20227
6. 20233
7. 20246
8. 202515
9. 202613

Newest CVEs

• CVE-2026-41022

  Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a…

  Eaton · easySoft

  Medium5.9
• CVE-2026-41021

  Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline…

  Eaton · easyE4

  High7.5
• CVE-2026-41020

  Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay…

  Eaton · easyE4

  High7.5
• CVE-2026-22622

  Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate…

  Eaton · PADM

  High8.8
• CVE-2026-22621

  Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to…

  Eaton · PADM

  High8.3
• CVE-2026-22620

  Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass…

  Eaton · PADM

  High8.6
• CVE-2026-22619

  Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker…

  Eaton · IPP software

  High7.8
• CVE-2026-22618

  A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute,…

  Eaton · IPP software

  Medium5.9
• CVE-2026-22617

  Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit…

  Eaton · IPP Software

  Medium5.7
• CVE-2026-22616

  Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting…

  Eaton · IPP Software

  Medium6.5