CVE-2026-22615: Input Validation
Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the local system to inject malicious code resulting in arbitrary command execution. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22615?
CVE-2026-22615 is classified as a critical vulnerability due to the potential for arbitrary command execution.
How do I fix CVE-2026-22615?
To fix CVE-2026-22615, you must update to the latest version of the Eaton Intelligent Power Protector software.
What type of attack is possible with CVE-2026-22615?
CVE-2026-22615 allows an attacker with admin privileges to inject malicious code leading to arbitrary command execution.
Which product is affected by CVE-2026-22615?
CVE-2026-22615 affects the Eaton Intelligent Power Protector software.
Is user intervention required to exploit CVE-2026-22615?
Exploitation of CVE-2026-22615 requires the attacker to have admin privileges and local system access.