Tycon Systems TPDIN-Monitor-WEB2 Auth Bypass & Info Disclosure (CVE-2026-61884, ICSA-26-202-01)

Vulnerability Overview Vulnerability Name: Tycon Systems TPDIN-Monitor-WEB2 Publication Date: July 21, 2026 Alert Code: ICSA-26-202-01 Related Topics: Industrial Control System Vulnerabilities, Industrial Control Systems Impact Scope Affected Version: TPDIN-Monitor-WEB2 2.3.9 CVSS Score: 9.8 Vendor: Tycon Systems Device: Tycon Systems TPDIN-Monitor-WEB2 Vulnerability Details: - CVE-2026-61884: Authentication bypass via alternate path/channel, sensitive information stored in cleartext - CVE-2026-55985: Authentication bypass via alternate path/channel, sensitive information stored in cleartext Remediation Recommended Practices: - Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. - Place control system networks and remote devices behind firewalls and isolate them from the business network. - When remote access is required, use more secure remote access methods, such as Virtual Private Networks (VPNs), and recognize that VPNs may have vulnerabilities and should be updated to the latest version. - Conduct appropriate impact analysis and risk assessment before deploying defensive measures. - Implement recommended cybersecurity strategies to proactively defend ICS assets. - Follow internal procedures to report suspicious malicious activity to CISA for tracking and correlation analysis. Additional Information Background: - Critical Infrastructure Sector: Critical Manufacturing - Deployed Countries/Regions: Global - Company Headquarters Location: United States Acknowledgments: - Abdiweli Guled reported these vulnerabilities to CISA. Legal Notice and Terms of Use: - This product is subject to this notice and the Privacy and Usage Policy. Revision History: - Initial Publication Date: 2026-07-21 - Revision: 1 - Summary: Initial release Tags Sector: Critical Manufacturing Sector Topics: Industrial Control System Vulnerabilities, Industrial Control Systems Related Advisories Weintek cMT3092X Johnson Controls C-CURE 9000 and Victor application server Panduit IntraVUE MZ Automation lib60870 Feedback Please share your thoughts. We have recently updated our anonymous product survey; your feedback is welcome. Footer CISA Hotline: 1-844-Say-CISA Contact Email: contact@cisa.dhs.gov Related Links About CISA: Budget and Performance, OIG.gov, FOIA Requests No FEAR Act: Office of Inspector General, Privacy Policy, Subscribe White House: USA.gov, Website Feedback Summary This webpage summarizes two critical vulnerabilities in Tycon Systems TPDIN-Monitor-WEB2 version 2.3.9, with a CVSS score of 9.8. These vulnerabilities could allow attackers to access sensitive credentials, compromise connected infrastructure, or manipulate physical devices, leading to physical safety risks. CISA recommends implementing multiple defensive measures to minimize the risk of exploitation of these vulnerabilities and provides detailed recommended practices.

Goal Reached Thanks to every supporter — we hit 100%!

Tycon Systems TPDIN-Monitor-WEB2 Auth Bypass & Info Disclosure (CVE-2026-61884, ICSA-26-202-01)