CVE-2026-82712 affects Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior with a cross-site request forgery (CSRF) vulnerability. The flaw could allow an attacker to perform unauthorized state-changing operations on the affected device. This is an OT/ICS-related vulnerability affecting industrial monitoring hardware. CISA has issued an ICS advisory (ICSA-26-246-08) regarding this issue. Firmware updates have been released (v2.4.2) to remediate the vulnerability. Users are advised to upgrade to the patched firmware version to mitigate risk. The vulnerability poses a risk to operational technology environments where the device is deployed.
