CVE-2026-22619

BRIEFING NOTE: CVE-2026-22619 Eaton Intelligent Power Protector (IPP) contains an insecure library loading vulnerability in its executable that could allow attackers to execute arbitrary code. The flaw exists in the software package itself and affects all versions prior to the latest release, which is now available through the Eaton download center. The vulnerability carries a critical CVSS score of 9.9, indicating severe risk. It requires only low attack complexity and low privilege user access, with network accessibility possible. The vulnerability has a broad impact scope, affecting confidentiality, integrity, and availability of the system. The low EPSS score of 0.00025 suggests this threat is not widely prevalent across the vulnerability landscape, though this does not diminish its severity for Eaton IPP users. While the vulnerability is not currently listed on the CISA Known Exploited Vulnerabilities catalog, it has been flagged as active on industry hot lists, indicating heightened community attention. There is no indication of publicly available exploit code at this time. Organizations using Eaton IPP should immediately apply the latest software patch available from Eaton to mitigate this critical risk.