CVE-2026-55985: The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated u

mediumCVSS 4.3CVE-2026-55985

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: medium — CVSS 4.3
Published: 2026-07-24
Last updated: 2026-07-30
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-55985

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-559850.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-55985	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

criticalTycon Systems TPDIN-Monitor-WEB2cisa

Recent advisories for web management interface

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

mediumexploitedCVE-2026-20316: A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software…nvd · 2026-07-29
criticalCVE-2026-61884: The web management interface of Tycon Systems TPDIN-Monitor-WEB2 does not perform server-side …nvd · 2026-07-24
highCVE-2026-44878: A vulnerability in the web-based management interface of an ECOS device could allow a highly p…nvd · 2026-07-21
unknownCVE-2026-11851: Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the we…nvd · 2026-07-15
highCVE-2025-70796: An unauthenticated path traversal vulnerability exists in the web management interface of WTI …nvd · 2026-07-10
mediumCVE-2026-0285: A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enable…nvd · 2026-07-09