Eaton Vulnerabilities Let Attackers Execute Arbitrary Code On the Host System

Cybersecuritynews •Abinaya • January 5, 2026

A critical security advisory addressing multiple vulnerabilities discovered in the Eaton UPS Companion (EUC) software. These security flaws, if exploited, could allow attackers to execute arbitrary code on the host system, potentially giving them complete control over affected devices. The advisory, identified as ETN-VA-2025-1026, highlights two specific vulnerabilities affecting all versions of the Eaton UPS Companion […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Eaton UPS Companion Software Vulnerabilities Allow Code Execution Eaton has issued a critical security advisory regarding multiple vulnerabilities in its UPS Companion software. These flaws could enable attackers to execute arbitrary code on host systems, potentially granting them full control over affected devices. The advisory, identified as ETN-VA-2025-1026, specifically notes two high-severity vulnerabilities present in all versions of the software. 4 sources 30

Extracted Entities

Platforms (1)

Eaton UPS Companion