Live › vulnerability › CVE-2026-41022
Go to dashboardEaton easySoft does not properly check the TLS certificates presented by easyE4 devices. A network attacker in the path can impersonate an easyE4 device and read or change traffic between the two.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 12:31 UTC. All times on this page are UTC.
Sites that use Eaton easySoft to manage easyE4 power devices over a TLS connection are exposed. An attacker on the same network segment as the management traffic is the realistic threat, so systems where easySoft and easyE4 devices share an isolated management VLAN carry less risk. Teams that do not run easySoft or easyE4 can skip it.
No product ranges from the sources yet.
unknown if the sources do not say which versions are affected.unknown (the sources do not name it).unknown.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.
This page as .md · .json · in your agent: get_signal("CVE-2026-41022")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.