Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-8333

TimePictra Stored Cross-site Scripting

A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Microchip
Products
Timepictra
CVE-2026-8332

TimePictra root password hardcoded in installation files

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Microchip
Products
Timepictra
CVE-2026-8331

TimePictra ermote code execution via file upload

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Microchip
Products
Timepictra
CVE-2026-2844

TimePictra Authentication Bypass Vulnerability

Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Microchip
Products
Timepictra
CVE-2026-3010

TimePictra Stored Cross-Site Scripting

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Microchip
Products
Timepictra