CVE-2026-22618: High severity Eaton Intelligent Power Protector vulnerability
A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users to web‑based attacks. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22618?
CVE-2026-22618 is classified as a security misconfiguration vulnerability that can expose users to web-based attacks.
How do I fix CVE-2026-22618?
To fix CVE-2026-22618, update to the latest version of Eaton Intelligent Power Protector software.
What type of vulnerability is CVE-2026-22618?
CVE-2026-22618 is a security misconfiguration vulnerability related to HTTP response headers.
Who is affected by CVE-2026-22618?
Organizations using Eaton Intelligent Power Protector software may be affected by CVE-2026-22618.
What are the potential consequences of CVE-2026-22618?
The consequences of CVE-2026-22618 include increased risk of web-based attacks targeting user information.