CVE-2026-55985 MEDIUM

CVE-2026-55985: Tycon Systems TPDIN-Monitor-WEB2 Cleartext Storage of Sensitive Information

Vendor Tycon Systems
Product TPDIN-Monitor-WEB2
Weakness CWE-312 · Cleartext storage
Published July 24, 2026
Last update July 27, 2026

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

The web management interface in  Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

Key dates

02Disclosure timeline

July 24, 2026 CVE published
July 27, 2026 Record updated