Skip to content
OpenAdvisories
Medium · 5.7 CVE-2026-22617 EUVD-2026-23176GHSA-m6jh-hgc7-xggx

Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the …

Published Apr 16, 2026 · Updated Apr 16, 2026 · Assigned by Eaton

Description

Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit it through a man‑in‑the‑middle attack. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download centre.

Affected products

VendorProductAffectedFixed
Eaton IPP Software < 2.0 2.0

References