CVE-2026-22620 Auth bypass in PADM
Unauthenticated remote attackers can bypass authentication to gain privileged access to Eaton Tripp Lite PADM devices due to improper input validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-22620?
CVE-2026-22620 is a high-severity authentication bypass vulnerability in Eaton PADM, published on 30 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device.
Weakness: CWE-89
Which versions are affected by CVE-2026-22620?
How do I fix CVE-2026-22620?
No fix has been published for CVE-2026-22620 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-22620 being exploited?
There is no known exploitation of CVE-2026-22620 in the wild and no public exploit code.
Sources
Also known as GHSA-6ghg-p2q3-j73x.