Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the local system to inject malicious code resulting in arbitrary command execution. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-22615 Arbitrary Command Execution in Eaton Intelligent Power Protector via XML Injection https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22615
Post summary
The text announces CVE‑2026‑22615, noting arbitrary command execution through XML injection on Eaton Intelligent Power Protector devices.
CVE-2026-22615 Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the loc… https://www.cve.org/CVERecord?id=CVE-2026-22615
Post summary
The text is a brief disclosure of CVE-2026-22615, highlighting an input validation flaw in Eaton Intelligent Power Protector XML that allows exploitation with admin privileges.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | eaton | intelligent_power_protector | - | - | - |