Timepictra

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-3010 MEDIUM This Month

Microchip TimePictra versions 11.0 through 11.3 SP2 contain a reflected cross-site scripting (XSS) vulnerability that allows unauthenticated attackers to inject malicious scripts through query parameters. Successful exploitation requires user interaction and can result in session hijacking, credential theft, or unauthorized information disclosure. No patch is currently available.

XSS Timepictra

NVD

CVSS 3.1

6.1

EPSS

0.0%

CVE-2026-2844 HIGH This Week

Timepictra versions up to 11.3 is affected by missing authentication for critical function (CVSS 7.5).

Authentication Bypass Timepictra

NVD

CVSS 3.1

7.5

EPSS

0.1%

CVE-2026-3010

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Timepictra

NVD

CVE-2026-2844

EPSS 0% CVSS 7.5

HIGH This Week

Timepictra versions up to 11.3 is affected by missing authentication for critical function (CVSS 7.5).

Authentication Bypass Timepictra

NVD