CVE-2026-61884

Name of the Vulnerable Software and Affected Versions Tycon Systems TPDIN-Monitor-WEB2 (affected versions not specified)

Description The web management interface fails to perform server-side validation of credentials during the login process. An unauthenticated remote attacker can bypass the authentication check by submitting empty values for both credential fields to establish a valid administrative session. This provides full access to device controls, including power relay management, device reboot, remote access service configuration, and network settings, potentially leading to infrastructure disruption or physical equipment damage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.