Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L N N 5.3 .0019 8.3 —
AFFECTED Product Versions Fixed TPDIN-Monitor-WEB2 unspecified 2.4.5
TIMELINE Jul 13 Reserved by icscert Jul 24 Published (CNA: icscert) Sep 4 PATCH SHIPPED — CVE-2026-55985 (Tycon Systems TPDIN-Monitor-WEB2). Fixed in TPDIN-Monitor-WEB2 2.4.5.
The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used to compromise other systems on the local network.
| Date | Event | Detail |
|---|---|---|
| July 13, 2026 | Reserved | Reserved by icscert |
| July 24, 2026 | Published | Published (CNA: icscert) |
| September 4, 2026 | PATCH SHIPPED | PATCH SHIPPED — CVE-2026-55985 (Tycon Systems TPDIN-Monitor-WEB2). Fixed in TPDIN-Monitor-WEB2 2.4.5. |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| Tycon Systems | TPDIN-Monitor-WEB2 | — | — | 2.4.5 |
Authoritative record: CVE-2026-55985 at cve.org
Vendors: tycon systems
Weaknesses: CWE-312
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-55985 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
