{"affected":[{"defaultStatus":"unaffected","product":"easySoft","source":"CNA: Eaton","vendor":"Eaton","versions":[{"lessThan":"8.46","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-41022","cwes":["CWE-295"],"description":"Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.","epss":{"date":"2026-11-04","percentile":0.00279,"score":0.00085},"exploits":[],"kev":null,"metrics":[{"score":5.9,"severity":"medium","source":"CNA: Eaton","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L","version":"3.1"}],"modifiedAt":1793824145882,"publishedAt":1793100724448,"references":[{"source":"CNA: Eaton","tags":["vendor-advisory"],"url":"https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-va-2026-1017.pdf"}],"remediation":[],"revision":"204d8bba286493113fbe78e512683e291eaf858abfe2f02b2a8ba23bb9b492c1","sources":[{"modifiedAt":1793824145882,"name":"CNA: Eaton","retrievedAt":1793826754359,"url":"https://www.cve.org/CVERecord?id=CVE-2026-41022"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793826761982,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-41022"}],"ssvc":{"assessedAt":1793817762805,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2026-41022","updatedAt":1793826761982}