CVE-2026-22613: Medium severity Eaton Network M3 vulnerability

Published Feb 9, 2026

Updated

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton

Network M3

which is available on the Eaton download center.

Affected Software

1 affected component

Eaton Network M3

Event History

Feb 9, 2026

CVE Published

via MITRE·05:39 AM

Data Sourced

via MITRE·05:39 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-22613?

CVE-2026-22613 has a high severity due to its potential to allow Man-in-the-Middle attacks.

How do I fix CVE-2026-22613?

To mitigate CVE-2026-22613, update to the latest firmware version of Eaton Network M3.

What are the potential impacts of CVE-2026-22613?

CVE-2026-22613 can potentially allow attackers to intercept and modify data during firmware upgrades.

Which products are affected by CVE-2026-22613?

CVE-2026-22613 specifically affects the Eaton Network M3 system.

Is there a patch available for CVE-2026-22613?

Yes, a patch for CVE-2026-22613 is included in the latest firmware update for Eaton Network M3.