PT-2026-33257 · Eaton · Intelligent Power Protector

Published 2026-04-16 · Updated 2026-04-16 · CVE-2026-22616

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Protector (IPP) (affected versions not specified)

Description Eaton Intelligent Power Protector (IPP) software contains insufficient rate-limiting controls on the web interface login page, allowing repeated authentication attempts. This issue has been actively exploited by attackers to brute force web authentication and compromise systems globally.

Recommendations Update to the latest version of Eaton IPP available on the Eaton download centre.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2026-22616

Affected Products

Intelligent Power Protector

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-22616 · Security Note
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1025.pdf · Vendor Advisory
• https://twitter.com/CVEnew/status/2044701576779149808 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044781779605680239 · Twitter Post
• https://twitter.com/NewsNerdie/status/2044838860757061973 · Twitter Post