Arbitrary Command Execution Vulnerability in Eaton Intelligent Power Protector

CVE-2026-22615

What is CVE-2026-22615?

A security vulnerability exists in Eaton Intelligent Power Protector due to improper input validation in XML processing. An attacker with administrative privileges and local system access can exploit this vulnerability to inject malicious code, enabling arbitrary command execution. This issue has been addressed in the latest Eaton IPP software version, which can be downloaded from the Eaton download centre.

References