Privilege Escalation Vulnerability in Eaton Tripp Lite Series PADM Firmware
CVE-2026-22622

8.8HIGH

Key Information:

Vendor

Eaton

Status
Padm
Vendor
CVE Published:
30 July 2026

What is CVE-2026-22622?

A security flaw exists in Eaton's Tripp Lite series PADM firmware due to improper input validation within its session management interface. This vulnerability can be exploited by authenticated users, allowing them to elevate their privileges and gain unauthorized access to the device. Organizations utilizing this firmware should take immediate action to mitigate the risk and ensure their systems remain secure.

Affected Version(s)

PADM 0 <= 20

References

https://www.eaton.com/content/dam/eaton/company/news-insi...
vendor-advisory
https://www.eaton.com/content/dam/eaton/products/backup-p...
release-notes

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.