CVE-2026-82684

High8.1Published on September 4, 2026

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attacker to extract system credentials, configurations, or flash contents.

CVSS score8.1 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness type (CWE)CWE-862

Vulnerabilities

Tycon TPDIN-Monitor-WEB2: Two Flaws Expose Relays and Configurations to Remote Control

CISA flags two Tycon TPDIN-Monitor-WEB2 flaws pre-2.4.5, including critical auth bypass CVE-2026-61884 allowing relay control. Fix: update to 2.4.5.

Sep 3, 202619:105 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Tycon TPDIN-Monitor-WEB2: Two Flaws Expose Relays and Configurations to Remote Control