{"id":"CVE-2026-41022","aliases":[],"title":"Eaton easySoft improperly validates TLS certificates presented by easyE4 devices.","titleSource":"Eaton","descriptionSource":"Eaton","products":[{"vendor":"Eaton","name":"easySoft","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"8.46","versionType":"custom"}],"defaultStatus":"unaffected","source":"Eaton","url":"https://www.cve.org/CVERecord?id=CVE-2026-41022"}],"remediation":[],"description":"Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.","severity":"medium","score":5.9,"published":"2026-10-27T11:32:04.448Z","modified":"2026-10-27T11:32:04.448Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-va-2026-1017.pdf"],"sources":[{"name":"CVE","id":"CVE-2026-41022","modified":"2026-10-27T11:32:04.448Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-41022"}],"assessments":[{"source":"Eaton","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L","score":5.9}],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T00:30:33.731Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}