CVE-2026-22622 describes an improper input validation vulnerability in one of the session management interfaces of Eaton's Tripp Lite series PADM firmware. An authenticated user could exploit this flaw to escalate privileges, gaining unrestricted access to the device. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates the attack can be performed remotely over the network with low complexity, requiring low privileges and no user interaction, and results in high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and no known exploits in the wild have been reported.

Successful exploitation allows an authenticated user to elevate privileges to gain unrestricted access to the device, potentially compromising confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict authenticated user access to trusted personnel only and monitor for suspicious activity related to session management interfaces.