← Back

CVE-2025-59887

nvd nist
Published: Dec 26, 2025Modified: Jun 17, 2026

JSON object

Loading...
8.6
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 6.0
Source: CybersecurityCOE@eaton.com (Secondary)

Description

Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the software package. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.

Affected (1)

Products: Eaton: Ups Companion
Eaton
1 product
Ups Companion
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ups Companion
Before 3.0

Related CWEs

CWE-427
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (1)

Source: CybersecurityCOE@eaton.com
PatchVendor Advisory

Timeline

No history available yet.