Loading vulnerability…
Insecure Library Loading in Eaton UPS Companion Installer
CVE-2025-59887 is an insecure library-loading vulnerability in the Eaton UPS Companion (EUC) software installer. Improper authentication of library files can permit malicious library substitution through an insecure loading path when an attacker can access the software package. Eaton UPS Companion versions prior to 3.0 are affected.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits arbitrary code execution on the affected host. This may compromise the confidentiality, integrity, and availability of the affected system.
If you can’t patch tonight, do this now.
Until the update can be deployed, restrict local and remote access to affected hosts to authorized personnel, place associated control-system networks behind properly configured firewalls, and obtain software only from official distribution channels to reduce the opportunity for package tampering.
Patch, then assume compromise.
Upgrade Eaton UPS Companion to version 3.0 or a later version obtained through Eaton's official download channels. Version 3.0 remediates the insecure library-loading issue.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
15 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.