CVE-2026-22618
Medium
Description
A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users to web‑based attacks. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.
SeverityMedium
CVSS5.9
Exploit probability14. percentile0.2%
ProductEaton Intelligent Power Protector
PublishedApr 16, 2026
First seenApr 16, 2026
Weakness typeCWE-358CWE-358
How to fix
Update
- eaton intelligent_power_protector2.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eaton intelligent_power_protector | v < 2.00 | 2.00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.