What’s Vulnerable › Vulnerabilities

CVE-2026-55985: Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-24 · updated 2026-10-24
• Weakness: CWE-312

Description

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

Affected products

• Tycon Systems TPDIN-Monitor-WEB2: before 2.4.5 — fixed in 2.4.5

How to fix

Upgrade to a fixed version: Tycon Systems TPDIN-Monitor-WEB2 2.4.5. Check the vendor advisory for mitigations.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-202-01.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-01

Get alerted when CVE-2026-55985 or the next vulnerability affects your stack