CVE-2026-82712
HIGHCVSS 8.8/10EPSS 0.25%
Last modified
CVE-2026-82712 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device.. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Tycon Systems | TPDIN-Monitor-WEB3 | <= 2.2.9 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-82712?
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device.
How severe is CVE-2026-82712?
CVE-2026-82712 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.25% probability of exploitation in the next 30 days.
How do I fix CVE-2026-82712?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-82703A security flaw has been discovered in Edimax BR-6214K 1.40.…6.6
- CVE-2026-82704Missing authorization in Apache Wicket. org.apache.wicket.c…6.9
- CVE-2026-82705Missing authorization in Apache Wicket. org.apache.wicket.a…6.3
- CVE-2026-82708The Botslab G980H dash camera firmware contains a path trave…6.5
- CVE-2026-8271A vulnerability was identified in D-Link DNS-320 2.06B01. Th…7.2
- CVE-2026-82710Improper Neutralization of Escape, Meta, or Control Sequence…2.3
- CVE-2026-82715Insecure Temporary File vulnerability in Hitachi Disk Array …7.9
- CVE-2026-82716The Botslab G980H dash camera firmware includes sensitive co…4.6
- CVE-2026-82717In NLnet Labs Unbound up to and including 1.26.0, a vulnerab…9.8
- CVE-2026-8272A security flaw has been discovered in D-Link DNS-320 2.06B0…7.2
- CVE-2026-82720NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a u…5.9
- CVE-2026-82722Allocation of Resources Without Limits or Throttling vulnera…8.3
Are you affected by CVE-2026-82712?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST