What is CVE-2026-41022?

CVE-2026-41022 is a medium-severity vulnerability in Eaton Easysoft, classified under Improper Certificate Validation. CVSS score: 5.9/10. Published 2026-10-27.

How severe is CVE-2026-41022?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Eaton Easysoft

CVE-2026-41022

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.

Vulnerability class: Improper Certificate Validation

Published 2026-10-27 · last modified 2026-10-27.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Eaton Easysoft

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bu… (vendor-advisory)

Frequently asked questions

What is CVE-2026-41022?: CVE-2026-41022 is a medium-severity vulnerability in Eaton Easysoft, classified under Improper Certificate Validation. CVSS score: 5.9/10. Published 2026-10-27.
How severe is CVE-2026-41022?: Medium severity. CVSS v3 base score is 5.9 out of 10.