CVE-2026-22616: High severity Eaton Intelligent Power Protector (IPP) vulnerability
Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue has been fixed in the latest version of Eaton IPP which is available on the Eaton download centre.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22616?
CVE-2026-22616 is a medium severity vulnerability due to insufficient rate-limiting controls.
How do I fix CVE-2026-22616?
To fix CVE-2026-22616, update to the latest version of Eaton Intelligent Power Protector (IPP).
What is the risk associated with CVE-2026-22616?
The risk associated with CVE-2026-22616 includes potential brute force attacks on the web interface login.
Which software is affected by CVE-2026-22616?
CVE-2026-22616 affects Eaton Intelligent Power Protector (IPP) software.
Is there a patch available for CVE-2026-22616?
Yes, a patch is available by updating to the latest version of Eaton Intelligent Power Protector (IPP).