Back to Database
Status published
Medium
CVE-2025-59888
Improper quotation in search paths in the Eaton UPS Companion...
Vulnerability Description
Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59888
Credits & Attribution
No credits recorded in the NVD database.
More from Eaton
View All →CVE-2025-67450
Due to insecure library loading in the Eaton UPS Companion...
High
7.8
CVE-2025-59890
Improper input sanitization in the file archives upload functionality of...
High
7.3
CVE-2025-59889
Improper authentication of library files in the Eaton IPP software...
High
8.6
CVE-2025-59887
Improper authentication of library files in the Eaton UPS Companion...
High
8.6
CVE-2025-59886
Improper input validation at one of the endpoints of Eaton...
High
8.8
Affected Vendor
Eaton
View all reports →Affected Software
UPS Companion software
Vulnerable Versions:
0
Timeline
Official Publish:
December 26th, 2025
Last Modified:
January 8th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H