{"schema":"threatline.record/2","record":{"id":"CVE-2026-41022","aliases":[],"summary":"Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercep","details":"Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.","categories":["Unclassified"],"product":"easySoft","vendor":"Eaton","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-41022","source_modified_at":"2026-10-27T11:32:04.448Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"easySoft","vendor":"Eaton","versions":[{"status":"affected","version":"0","lessThan":"8.46","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-41022","source_modified_at":"2026-10-27T11:32:04.448Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"easySoft","ecosystem":null},"version":"8.46","basis":"first unaffected version stated in the CVE record"}],"cvss":5.9,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-27T11:32:04.448Z","modified_at":"2026-10-27T11:32:04.448Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-41022","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T11:32:04.448Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-va-2026-1017.pdf","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-27T11:32:04.448Z","content_hash":"300bd5b55c78c1c1ccd1adcf9880a51c87d0b687e00d0192ede9d234057a58ab"}}