CVE-2026-22622

8.8 Élevée

Publiée le 30/07/2026 à 13:16 · Modifiée le 31/07/2026 à 13:17 · En attente d'analyse NVD · Source : CybersecurityCOE@eaton.com

Description

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device.

Traduire en français

Produits concernés

Eaton PADM

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	CybersecurityCOE@eaton.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-78

Références

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-va-2026-1005.pdf
https://www.eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/eol/secure/eaton-tripp-lite-series-padm-20-eol-notice.pdf

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories