Search/CVE-2026-22614
● CVE — Medium

CVE-2026-22614

VendoreatonProducteasysoftDiscoveredMar 10, 2026UpdatedMay 21, 2026

The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially read the sensitive information stored and tamper with the project file. This security issue has been fixed in the latest version of Eaton EasySoft which is available on the Eaton download centre.

CVSS v3.1
6.1 MEDIUM
EPSS
0.08%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
● 0.00pp
0.08% → 0.08% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityLOW
AvailabilityNONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Connections
2 relationships
Timeline
disclosure → media coverage
Mar 10, 2026
Disclosure — published as a CVE record. · last revised by NVD May 21, 2026