CVE-2026-22617

Eaton IPP (Intelligent Power Protector) is affected by an insecure cookie configuration that could let a network‑based attacker intercept cookies and perform a man‑in‑the‑middle attack. The description is consistent across multiple sources (NVD, Red Hat, ENISA EUVD, CNNVD, CVE lists, AttackersKB)...

CVE-2026-22617

Eaton Intelligent Power Protector IPP uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on t...

Eaton Intelligent Power Protector 安全漏洞

Eaton Intelligent Power Protector is a power protection software developed by Eaton, Inc. in the United States. The Eaton Intelligent Power Protector has a security vulnerability, which stems from the insecure library loading in executable files. This vulnerability may allow attackers with access...

PT-2026-33257

Eaton Intelligent Power Protector IPP software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue has been fixed in the latest version of Eaton IPP which is available on the Eaton download centre...