CVE-2026-12620

Vulnerability Description

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints.

This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.

Vulnerability Details

Published Date

June 19, 2026

Last Modified

June 19, 2026

CWE ID

CWE-200

Source

NVD

Vendor

Microchip

Product

GridTime 3000

External References

https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/gridtime-3000-gnss-time-server-access-token-exposure

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment