CVE-2026-22619

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the software package. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download center.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published
Apr 16, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-22627.5The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.21 viaCVE-2026-226208.6Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote aCVE-2026-226218.3Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticatedCVE-2026-226228.8Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticatedCVE-2026-226237.2Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary cCVE-2026-226244.3Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proCVE-2026-226254.6Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitive system files.CVE-2026-226264.9Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal deviCVE-2026-226278.8A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 maCVE-2026-226286.7An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute systCVE-2026-226293.7An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 CVE-2026-22635.3The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized modification of data due to