CVE-2026-22622: OS Command Injection
Published Jul 30, 2026
·Updated
Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device.
Affected Software
1 affected component
Eaton Tripp Lite PADM firmware
Event History
Jul 30, 2026
CVE Published
via MITRE·10:21 AM
Data Sourced
via MITRE·10:21 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-22622?
The severity of CVE-2026-22622 is rated high with a score of 8.8.
2
How do I fix CVE-2026-22622?
To fix CVE-2026-22622, apply the latest firmware update provided by Eaton for the Tripp Lite PADM series.
3
What impact does CVE-2026-22622 have on my device?
CVE-2026-22622 allows authenticated users to elevate their privileges, leading to unrestricted access to the device.
4
Which software is affected by CVE-2026-22622?
CVE-2026-22622 affects Eaton's Tripp Lite PADM firmware.
5
What type of vulnerability is CVE-2026-22622?
CVE-2026-22622 is classified as an improper input validation vulnerability that can lead to OS command injection.