CVE-2026-22619
Received
Received - Intake
Insecure Library Loading in Eaton IPP Enables Code Execution
Publication date: 2026-04-16
Last updated on: 2026-04-22
Assigner: Eaton
Description
Description
Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the software package.Β This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download center.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| eaton | intelligent_power_protector | to 2.00 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-427 | The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. |