CVE-2026-55985

MEDIUM4.3Published on July 24, 2026

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

CVSS score4.3 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness type (CWE)CWE-312

Tycon TPDIN-Monitor-WEB2, due falle espongono relè e configurazioni al controllo remoto

Vulnerabilities

Tycon TPDIN-Monitor-WEB2: Two Flaws Expose Relays and Configurations to Remote Control

CISA flags two Tycon TPDIN-Monitor-WEB2 flaws pre-2.4.5, including critical auth bypass CVE-2026-61884 allowing relay control. Fix: update to 2.4.5.

Sep 3, 20265 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Tycon TPDIN-Monitor-WEB2: Two Flaws Expose Relays and Configurations to Remote Control