CVE-2026-22617 Eaton CVE debrief

Who should care

Defenders responsible for Eaton IPP software installations should assess exposure and prioritize upgrading to the latest software version to address the insecure cookie configuration vulnerability.

Why it matters

CVE-2026-22617 is a MEDIUM-severity vulnerability in Eaton Intelligent Power Protector (IPP) that allows network-based attackers to intercept cookies and exploit them through man-in-the-middle attacks. Defenders should prioritize verifying and upgrading to the latest Eaton IPP software version and review network configurations to prevent exploitation.

• Network-based attackers may intercept cookies and exploit them through man-in-the-middle attacks
• Defenders need to verify and upgrade to the latest Eaton IPP software version to address the vulnerability
• Eaton IPP software installations require review and update of network configurations to prevent exploitation

Technical summary

Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network-based attacker to intercept the cookie and exploit it through a man-in-the-middle attack. The vulnerability has a CVSS score of 5.7 and severity of MEDIUM. This insecure configuration affects Eaton IPP software installations, enabling potential attackers to intercept and exploit cookies. Defenders should prioritize verifying and upgrading to the latest Eaton IPP software version available on the Eaton download centre to address the insecure cookie configuration vulnerability.

Defensive priority

Defenders should prioritize verifying and upgrading to the latest Eaton IPP software version available on the Eaton download centre to address the insecure cookie configuration vulnerability.

Recommended defensive actions

• Verify Eaton IPP software version and upgrade to the latest version available on the Eaton download centre
• Review and update network configurations to prevent exploitation of the insecure cookie configuration
• Monitor Eaton IPP software for any suspicious activity related to cookie interception
• Conduct a thorough review of network configurations to prevent exploitation
• Implement compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Review relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score of 5.7 and severity of MEDIUM. Eaton has released a security bulletin addressing the issue. The vulnerability allows network-based attackers to intercept cookies and exploit them through man-in-the-middle attacks. Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration. The CVE record was published on 2026-04-16T06:16:08.980Z and has not been modified since then. The NVD entry and vendor advisory provide additional context

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.