CVE-2026-77847: CWE-798 in Tycon Systems TPDIN-Monitor-WEB3

CVE-2026-77847 identifies a use of hard-coded credentials vulnerability in Tycon Systems TPDIN-Monitor-WEB3 versions up to 2.2.9. Hard-coded credentials can be extracted by attackers, potentially leading to interception of sensitive information or credentials. The vulnerability has a CVSS 3.1 base score of 6.5 with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

An attacker within the adjacent network could exploit the hard-coded credentials to intercept sensitive information or credentials. This could lead to unauthorized access to sensitive data. There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting network access to the affected device and avoid exposing it to untrusted networks.