Skip to content
OpenAdvisories
High ICSA-26-246-08 3 CVEs

Tycon Systems TPDIN-Monitor-WEB3

Published Sep 3, 2026 · Updated Sep 3, 2026

Vendor: Tycon Systems Product: TPDIN-Monitor-WEB3

Summary

Successful exploitation of these vulnerabilities could allow for an attacker to perform a man-in-the-middle (MitM) attack, cause a factory reset, wipe credentials, or retrieve sensitive information.

Vulnerabilities 3

  • High 8.8
    CVE-2026-82712

    Tycon Systems TPDIN-Monitor-WEB3 Cross-Site Request Forgery

    Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device.

    Tycon Systems TPDIN-Monitor-WEB3
  • High 8.1
    CVE-2026-82684

    Tycon Systems TPDIN-Monitor-WEB3 Missing Authorization

    Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attacker to extract system credentials, configurations, or flash contents.

    Tycon Systems TPDIN-Monitor-WEB3
  • Medium 6.5
    CVE-2026-77847

    Tycon Systems TPDIN-Monitor-WEB3 Use of Hard-coded Credentials

    Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability. This could allow an attacker to intercept sensitive information or credentials.

    Tycon Systems TPDIN-Monitor-WEB3

Revision history

  1. #1

    Initial Publication

References