CVE-2026-22622

Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Eaton Tripp Lite PADM Firmware

Publication date: 2026-07-30

Last updated on: 2026-07-31

Assigner: Eaton

Description

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-07-31

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-22622

EUVD

EUVD-2026-51077

Affected Vendors & Products

Vendor	Product	Version / Range
eaton	tripp_lite_series_padm_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper input validation in the session management interface of Eaton's Tripp Lite series PADM firmware. An authenticated user could exploit this to elevate privileges and gain unrestricted access to the device.

Detection Guidance

Detection requires checking Eaton Tripp Lite series PADM firmware versions for improper session management. Review device logs for unusual privilege escalation events or unauthorized access attempts. Verify network traffic to the device for unexpected session modifications.

Impact Analysis

An attacker with access could escalate privileges, potentially taking full control of the device. This may lead to unauthorized configuration changes, data theft, or disruption of connected systems.

Compliance Impact

This vulnerability allows an authenticated user to elevate privileges and gain unrestricted access to the device due to improper input validation in the session management interface. This could potentially lead to unauthorized data access or modification, which may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security) if sensitive data is involved.

Mitigation Strategies

Update the Eaton Tripp Lite series PADM firmware to the latest version to address the improper input validation issue. Ensure only authenticated users with least privilege access are allowed to interact with the session management interface.

Hi! I’m here to help you understand CVE-2026-22622. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70