CVE-2026-22616CWE-307

Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting…

Medium · published April 16, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue has been fixed in the latest version of Eaton IPP which is available on the Eaton download centre.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00319 · 23.7th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2026-04-16T04:54Z
EPSS history
Timeline
  • 16 APR 04:54Z
    Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting…
    cvelistv5