Microchip Timepictra vulnerabilities

2 CVEs affecting Microchip Timepictra, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-3010, published 2026-02-28.

More from Microchip.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-2844, published 2026-02-28. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2.
• CVE-2026-3010, published 2026-02-28. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra:…