[ Vendor · 3 CVEs ]
Eaton
CVEs affecting Eaton published in the last 30 days, plus any Eaton CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-41020 | 27 Oct 2026 | CVSS 7.5 | Eaton easyE4Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic… | |
| CVE-2026-41021 | 27 Oct 2026 | CVSS 7.5 | Eaton easyE4Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform… | |
| CVE-2026-41022 | 27 Oct 2026 | CVSS 5.9 | Eaton easySoftEaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform… |