CVE-2026-22618

Name: CVE-2026-22618 — Vulnerability Record
Brand: Quanteta Data Lab
SKU: CVE-2026-22618

MEDIUM

CVSS v3.1: 5.9 · EPSS: 0.0001 (0.8 percentile)

NetworkNo privileges

Source data as of: 2026-04-17 06:05:21 UTC

At a glance

Severity: MEDIUM
CVSS: 5.9 v3.1 · NVD
EPSS: 0.0001 (0.8 percentile) · FIRST.org
CISA KEV: No
Attack conditions (CVSS vector): NetworkNo privileges · Source: NVD Vector
Published: 2026-04-16 · Modified: 2026-04-16
References: Jump to references (1)

CVSS / EPSS / KEV

CVSS v3.1 5.9 / 10 MEDIUM Source: NVD

EPSS 0.0001 0.8 percentile Source: FIRST.org

CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute, potentially exposing users to web‑based attacks. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.

Record details

CVE ID: CVE-2026-22618
CVSS (v3.1): 5.9 (MEDIUM)
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N
Exploitability subscore: 1.6
Impact subscore: 4.2
EPSS: 0.0001 (0.8 percentile) — 2026-04-17
CISA KEV: No
Weakness (CWE): CWE-358
Affected configurations (CPE): 0
Published: 2026-04-16
Modified: 2026-04-16
Status: Received

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.

Reference https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulle…

← Back to all records