Vulnerability intelligence

CVE-2026-55985

Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information

Tycon Systems TPDIN-Monitor-WEB2 CWE-312

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

CVSS Score

4.3

Medium

EPSS — Exploit Probability

0.2%

Riskier than 9% of all CVEs · checked 2026-10-24

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published