Eaton vulnerabilities
59 CVEs and advisories name Eaton as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-41022Eaton easySoft improperly validates TLS certificates presented by easyE4 devices.
- CVE-2026-41021Eaton easyE4 uses an insufficiently strong password policy.
- CVE-2026-41020Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured…
- CVE-2026-22622Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated
- CVE-2026-22621Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated
- CVE-2026-22620Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote a
- CVE-2026-22619Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execut
- CVE-2026-22618A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecur
- CVE-2026-22617Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the c
- CVE-2026-22616Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insuffi
- CVE-2026-22615Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privil
- CVE-2026-22614The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access
- CVE-2026-22613The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attac
- CVE-2025-67450Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the software package could perf
- CVE-2025-59888Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with
- CVE-2025-59887Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker
- CVE-2025-59886Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker with network access t
- CVE-2025-59890Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead int
- CVE-2025-48397The privileged user could log in without sufficient credentials after enabling an application protocol.
- CVE-2025-48396Arbitrary code execution is possible due to improper validation of the file upload functionality in Eaton BLSS.
- CVE-2025-59889Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the
- CVE-2025-48395An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited
- CVE-2025-48394An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited
- CVE-2025-48393The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attac
- CVE-2025-22493Improper cookie attributes in Foreseer Reporting Software (FRS)
- CVE-2025-22492Insecure storage of connection strings in FRS
- CVE-2025-22491Improper Input Validation in Foreseer Reporting Software (FRS)
- CVE-2025-22495An improper input validation vulnerability was discovered in the NTP server configuration field of the Network-M2 card.
- CVE-2022-33862Improper access control mechanism in IPP
- CVE-2022-33861Insufficient verification of authenticity in IPP