CVE-2026-82712

High8.8Published on September 4, 2026

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device.

CVSS score8.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-352

Vulnerabilities

Tycon TPDIN-Monitor-WEB2: Two Flaws Expose Relays and Configurations to Remote Control

CISA flags two Tycon TPDIN-Monitor-WEB2 flaws pre-2.4.5, including critical auth bypass CVE-2026-61884 allowing relay control. Fix: update to 2.4.5.

Sep 3, 202619:105 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Tycon TPDIN-Monitor-WEB2: Two Flaws Expose Relays and Configurations to Remote Control