CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-12620

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 13.7%

CVSS Severity

CVSS v3 Score 6.5

References

https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/gridtime-3000-gnss-time-server-access-token-exposure

Products affected by CVE-2026-12620

Microchip » Gridtime 3000 » Version: N/A

cpe:2.3:h:microchip:gridtime_3000:-
Microchip » Gridtime 3000 Firmware » Version: 1.0r0.03

cpe:2.3:o:microchip:gridtime_3000_firmware:1.0r0.03
Microchip » Gridtime 3000 Firmware » Version: 1.0r1.0

cpe:2.3:o:microchip:gridtime_3000_firmware:1.0r1.0
Microchip » Gridtime 3000 Firmware » Version: 1.1r0.0

cpe:2.3:o:microchip:gridtime_3000_firmware:1.1r0.0
Microchip » Gridtime 3000 Firmware » Version: 1.1r1.0

cpe:2.3:o:microchip:gridtime_3000_firmware:1.1r1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-12620

Products

Pricing

Contact Us