CVE-2026-22618
Received Received - Intake
Insecure HTTP Header in Eaton IPP Causes Web Attack Risk

Publication date: 2026-04-16

Last updated on: 2026-04-22

Assigner: Eaton

Description
A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users to web‑based attacks. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-16
Last Modified
2026-04-22
Generated
2026-06-16
AI Q&A
2026-04-16
EPSS Evaluated
2026-06-15
NVD
CVE-2026-22618
EUVD
EUVD-2026-23177
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
eaton intelligent_power_protector to 2.00 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-358 The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a security misconfiguration in Eaton Intelligent Power Protector (IPP) where an HTTP response header was set with an insecure attribute. This misconfiguration could potentially expose users to web-based attacks.

Impact Analysis

The vulnerability can impact you by exposing users to web-based attacks due to the insecure HTTP response header attribute. This could lead to compromised integrity of information or unauthorized actions triggered through the web interface.

Mitigation Strategies

The vulnerability is fixed in the latest version of Eaton Intelligent Power Protector (IPP) software.

To mitigate this vulnerability, you should update your Eaton IPP software to the latest version available from the Eaton download centre.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-22618. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart