CVE-2026-22619 Other in IPP software

High 7.8 Published 16 Apr 2026 Updated 16 Apr 2026

An attacker with access to the software package can execute arbitrary code via insecure library loading in Eaton IPP.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-22619?

CVE-2026-22619 is a high-severity vulnerability in Eaton IPP software, published on 16 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker with access to the software package. This security issue has been fixed in the latest version of Eaton IPP software which is available on the Eaton download center.

Weakness: CWE-427

Which versions are affected by CVE-2026-22619?

It affects 1 product.

Products include Eaton Intelligent Power Protector.

How do I fix CVE-2026-22619?

No fix has been published for CVE-2026-22619 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-22619 being exploited?

There is no known exploitation of CVE-2026-22619 in the wild and no public exploit code.

Sources

Also known as GHSA-w3cg-4gfc-vw5x.