What is CVE-2026-22622?

CVE-2026-22622 is a high-severity vulnerability in Eaton Padm, classified under OS Command Injection. CVSS score: 8.8/10. Published 2026-07-30.

How severe is CVE-2026-22622?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in Eaton Padm

CVE-2026-22622

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device.

Vulnerability class: Command Injection (OS Command Injection)

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Eaton Padm — versions 0

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

CybersecurityCOE@eaton.com (vendor-advisory)
CybersecurityCOE@eaton.com (release-notes)

Frequently asked questions

What is CVE-2026-22622?: CVE-2026-22622 is a high-severity vulnerability in Eaton Padm, classified under OS Command Injection. CVSS score: 8.8/10. Published 2026-07-30.
How severe is CVE-2026-22622?: High severity. CVSS v3 base score is 8.8 out of 10.