What is CVE-2026-61884?

CVE-2026-61884 is a critical-severity vulnerability, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 9.8/10. Published 2026-07-24.

How severe is CVE-2026-61884?

Critical severity. CVSS v3 base score is 9.8 out of 10.

CVE-2026-61884

CVE-2026-61884

The web management interface of Tycon Systems TPDIN-Monitor-WEB2 does not perform server-side validation of credentials during the login process. By submitting empty values for both credential fields, an unauthenticated remote attacker c…

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Weakness classification (CWE)

CWE-288 — Authentication Bypass Using an Alternate Path or Channel

References

ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov

Frequently asked questions

What is CVE-2026-61884?: CVE-2026-61884 is a critical-severity vulnerability, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 9.8/10. Published 2026-07-24.
How severe is CVE-2026-61884?: Critical severity. CVSS v3 base score is 9.8 out of 10.