Skip to content
OpenAdvisories
Critical ICSA-26-202-01 2 CVEs

Tycon Systems TPDIN-Monitor-WEB2 (Update A)

Published Jul 21, 2026 · Updated Sep 3, 2026 · Revision 2

Vendor: Tycon Systems Product: TPDIN-Monitor-WEB2

Summary

Successful exploitation of these vulnerabilities could result in an attacker accessing sensitive credentials, disrupting connected infrastructure, or manipulating physical equipment, which could present a physical safety risk.

Vulnerabilities 2

  • Critical 9.8
    CVE-2026-61884

    Tycon Systems TPDIN-Monitor-WEB2 Missing Authentication for Critical Function

    The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any…

    Tycon Systems TPDIN-Monitor-WEB2
  • Medium 4.3
    CVE-2026-55985

    Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information

    The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read …

    Tycon Systems TPDIN-Monitor-WEB2

Revision history

  1. #2

    Updated affected version range and vulnerability details based on vendor input.

  2. #1

    Initial Publication

References