Most recent entries from all

EUVD-2026-265140

fkie_cve-2025-59888

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the

file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.

GHSA-c447-7qcm-fmv2

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the

file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.

jvndb-2026-000005

EATON UPS Companion provided by Eaton contains multiple vulnerabilities listed below.<ul><li>Uncontrolled search path element (CWE-427, CVE-2025-59887)</li><li>Unquoted search path or element (CWE-428, CVE-2025-59888)</li></ul>Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported these vulnerabilities to the developer and IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

WID-SEC-W-2025-2926 — Eaton UPS Companion Software: Mehrere Schwachstellen ermöglichen Codeausführung

Ein Angreifer kann mehrere Schwachstellen in Eaton UPS Companion Software ausnutzen, um beliebigen Programmcode auszuführen.