Eaton EasySoft

• CVE-2026-41022 Medium 5.9 Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercep <0.1%
• CVE-2026-22614 Medium 6.1 The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially re <0.1%
• CVE-2023-43777 Medium 5.9 Insecure storage of password in easySoft 0.3%