Tpdin Monitor Web2 CVE-2026-55985

Q: What is the CVSS score of CVE-2026-55985?

CVE-2026-55985 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-48744 MEDIUM

Cleartext Storage of Sensitive Information (CWE-312)

2026-07-24 icscert

GHSA-gg6g-q7xj-hhwf

Information Disclosure Tpdin Monitor Web2 Tycon Systems

5.3

CVSS 4.0 · Vendor: icscert

Severity by source

Vendor (icscert) PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (icscert) · only source for this CVE.

CVSS VectorVendor: icscert

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 12:11 vuln.today

CVSS changed

Jul 24, 2026 - 22:23 NVD

4.3 (MEDIUM) 5.3 (MEDIUM)

DescriptionCVE.org

The web management interface in Tycon Systems TPDIN-Monitor-WEB2

stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.

AnalysisAI

Cleartext credential storage in Tycon Systems TPDIN-Monitor-WEB2 web management interface allows authenticated attackers to view system credentials, potentially leading to compromise of other network systems. Affected version is 2.3.9. No active exploitation or public exploit is known, and EPSS indicates a very low probability of exploitation.