TLS Certificate Validation Flaw in Eaton easySoft Affecting easyE4 Devices
CVE-2026-41022

5.9MEDIUM

Key Information:

Vendor

Eaton

Status
Easysoft
Vendor
CVE Published:
27 October 2026

What is CVE-2026-41022?

Eaton easySoft exhibits a weakness in its TLS certificate validation process when communicating with easyE4 devices. This vulnerability enables network-adjacent attackers to potentially conduct man-in-the-middle attacks, allowing them to intercept or alter communications between the easySoft application and the easyE4 devices. Proper certificate validation is crucial to ensure secure interactions in network environments.

Affected Version(s)

easySoft 0 < 8.46

References

https://www.eaton.com/content/dam/eaton/company/news-insi...
vendor-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.