CVE-2026-22620: SQL Injection
Published Jul 30, 2026
·Updated
Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device.
Affected Software
1 affected component
Eaton Tripp Lite series PADM firmware
Event History
Jul 30, 2026
CVE Published
via MITRE·10:11 AM
Data Sourced
via MITRE·10:11 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-22620?
CVE-2026-22620 has a severity score of 8.6, which is classified as high.
2
How do I fix CVE-2026-22620?
To mitigate CVE-2026-22620, update the Eaton Tripp Lite series PADM firmware to the latest version provided by the vendor.
3
What kind of attack does CVE-2026-22620 allow?
CVE-2026-22620 allows unauthenticated remote attackers to bypass authentication and gain privileged access.
4
Which component is affected by CVE-2026-22620?
CVE-2026-22620 affects the authentication component of Eaton's Tripp Lite series PADM firmware.
5
What vulnerabilities are associated with CVE-2026-22620?
CVE-2026-22620 is associated with input validation issues and SQL injection risks.