CVE-2026-22620

HIGH8.6

Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device

Published Jul 30, 2026

Modified 3 weeks ago

Details

Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device.

References

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-22620

ADVISORY

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-va-2026-1005.pdf

WEB

https://www.eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/eol/secure/eaton-tripp-lite-series-padm-20-eol-notice.pdf

CVSS Analysis

CVSS v3.1

8.6

Exploitability

Attack Vector