PT-2026-33256 · Eaton · Intelligent Power Protector

Published 2026-04-16 · Updated 2026-04-16 · CVE-2026-22615

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Protector (affected versions not specified)

Description Improper input validation in an XML component allows an attacker with administrative privileges and local system access to perform XML injection, which can lead to arbitrary command execution.

Recommendations Update to the latest version of Eaton IPP software available on the Eaton download centre.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-22615

Affected Products

Intelligent Power Protector

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-22615 · Security Note
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1025.pdf · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2044784339456610615 · Twitter Post
• https://twitter.com/CVEnew/status/2044701577798455689 · Twitter Post