CVE-2026-22617
Medium
Description
Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
SeverityMedium
CVSS5.7
Exploit probability—
ProductEaton Intelligent Power Protector
PublishedApr 16, 2026
First seenApr 16, 2026
Weakness typeCWE-614CWE-614
How to fix
Update
- eaton intelligent_power_protector2.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eaton intelligent_power_protector | v < 2.00 | 2.00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.