PT-2026-66455 · Eaton · Padm

CVE-2026-22622 · Publicado 2026-07-30 · Atualizado 2026-07-30

Mitre

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-22622

Produtos afetados

Padm

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-22622 · Nota de Segurança
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-vulnerability-advisory.pdf · Aviso do Fabricante
• https://eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/eol/secure/eaton-tripp-lite-series-padm-20-eol-notice.pdf · Nota