CVE-2026-22621: OS Command Injection

Published Jul 30, 2026

Updated

Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment.

Affected Software

1 affected component

Eaton Tripp Lite series PADM firmware

Event History

Jul 30, 2026

CVE Published

via MITRE·10:16 AM

Data Sourced

via MITRE·10:16 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-22621?

The severity of CVE-2026-22621 is rated as high with a score of 8.3.

How do I fix CVE-2026-22621?

To fix CVE-2026-22621, update to the latest version of Eaton's Tripp Lite Series PADM firmware that addresses the improper input validation issue.

Who is affected by CVE-2026-22621?

CVE-2026-22621 affects users of Eaton Tripp Lite Series PADM firmware who have authenticated administrative access.

What type of vulnerability is CVE-2026-22621?

CVE-2026-22621 is categorized as an OS Command Injection vulnerability due to improper input validation.

What can attackers potentially do with CVE-2026-22621?

Attackers could exploit CVE-2026-22621 to execute arbitrary commands within a restricted environment if they have authenticated administrator privileges.