CVE-2026-77847

Medium6.5Published on September 4, 2026

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability. This could allow an attacker to intercept sensitive information or credentials.

CVSS score6.5 / 10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness type (CWE)CWE-798

Vulnerabilities

Tycon TPDIN-Monitor-WEB2: Two Flaws Expose Relays and Configurations to Remote Control

CISA flags two Tycon TPDIN-Monitor-WEB2 flaws pre-2.4.5, including critical auth bypass CVE-2026-61884 allowing relay control. Fix: update to 2.4.5.

Sep 3, 202619:105 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Tycon TPDIN-Monitor-WEB2: Two Flaws Expose Relays and Configurations to Remote Control