Timepictra

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-2844 Feb 28, 12:16 HIGH This Week

Timepictra versions up to 11.3 is affected by missing authentication for critical function (CVSS 7.5).

Authentication Bypass Timepictra Microchip

NVD

CVSS 3.1

7.5

EPSS

0.1%

CVE-2026-3010 Feb 28, 12:16 MEDIUM This Month

Microchip TimePictra versions 11.0 through 11.3 SP2 contain a reflected cross-site scripting (XSS) vulnerability that allows unauthenticated attackers to inject malicious scripts through query parameters. Successful exploitation requires user interaction and can result in session hijacking, credential theft, or unauthorized information disclosure. No patch is currently available.

XSS Timepictra Microchip

NVD

CVSS 3.1

6.1

EPSS

0.0%

CVE-2026-2844

EPSS 0% CVSS 7.5

HIGH This Week

Timepictra versions up to 11.3 is affected by missing authentication for critical function (CVSS 7.5).

Authentication Bypass Timepictra Microchip

NVD

CVE-2026-3010

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Timepictra Microchip

NVD