CVE-2026-55985: medium-severity vulnerability in Tycon Systems TPDIN-Monitor-WEB2
Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.2%
The web management interface in Tycon Systems TPDIN-Monitor-WEB2
stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Tycon Systems · TPDIN-Monitor-WEB2Related CVEs — Tycon Systems TPDIN-Monitor-WEB2
In the same product, most dangerous first.