Vulnerabilities

TI-2026-57016 CVE-2026-82684 · GHSA-p28w-h6rx-cx77

Tycon Systems TPDIN-Monitor-WEB3 Missing Authorization

MEDIUM 40

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00464 Published 2026-09-04 Fixed in v2.4.2 CWE-862

TI-2026-57036 CVE-2026-82712 · GHSA-wg4h-wx9p-hqrr

Tycon Systems TPDIN-Monitor-WEB3 Cross-Site Request Forgery

LOW 39

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00248 Published 2026-09-04 Fixed in v2.4.2 CWE-352

TI-2026-54207 CVE-2026-77847 · GHSA-hjrq-4m3p-5hhc

Tycon Systems TPDIN-Monitor-WEB3 Use of Hard-coded Credentials

LOW 31

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.0033 Published 2026-09-04 Fixed in v2.4.2 CWE-798

TI-2026-44281 CVE-2026-61884 · GHSA-jmfc-m78f-w5vj

Tycon Systems TPDIN-Monitor-WEB2 Missing Authentication for Critical Function

MEDIUM 49

The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00556 Published 2026-07-24 Fixed in 2.4.5 CWE-306

TI-2026-40383 CVE-2026-55985 · GHSA-gg6g-q7xj-hhwf

Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information

LOW 23

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00195 Published 2026-07-24 Fixed in 2.4.5 CWE-312