Input Validation Flaw in Eaton's Tripp Lite Series PADM Firmware
CVE-2026-22620

8.6HIGH

Key Information:

Vendor

Eaton

Status
Padm
Vendor
CVE Published:
30 July 2026

What is CVE-2026-22620?

An improper input validation flaw in the authentication component of Eaton's Tripp Lite series PADM firmware may enable an unauthenticated remote attacker to bypass the authentication process. This vulnerability could potentially grant unauthorized privileged access, allowing the attacker to manipulate the device and its configurations without detection.

Affected Version(s)

PADM 0 <= 20

References

https://www.eaton.com/content/dam/eaton/company/news-insi...
vendor-advisory
https://www.eaton.com/content/dam/eaton/products/backup-p...
release-notes

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.