Vulnerabilities
Products Security index
Vulnerabilities
CVE-2026-41022
TLS Certificate Validation Failure in Eaton easySoft Allows Man-In-The-Middle Attacks
CVE-2026-41021
Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials.
CVE-2026-41020
Replay Attack via Static Nonce in Eaton easyE4 Authentication
CVE-2026-22622
Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device.
CVE-2026-22621
Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment.
