CVE-2026-55985

MEDIUM 4.3

Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

CWE	CWE-312
Vendor	tycon systems
Product	tpdin-monitor-web2
Published	Jul 24, 2026

Stay Ahead of the Next One

Get instant alerts for tycon systems tpdin-monitor-web2

Be the first to know when new medium vulnerabilities affecting tycon systems tpdin-monitor-web2 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

Tycon Systems / TPDIN-Monitor-WEB2

2.3.9

References

NVD ↗ CVE.org ↗ EPSS Data ↗

tyconsystems.com: https://www.tyconsystems.com/contact cisa.gov: https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-01 github.com: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-202-01.json

Credits

Abdiwelli Guled reported this vulnerability to CISA.