← All advisories

Medium severity6.5NVD Advisory· Published Jun 19, 2026· Updated Jul 9, 2026

CVE-2026-12620

CVE-2026-12620

Description

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints.

This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.

Affected products

2

Microchip/Gridtime 3000 Firmware
cpe:2.3:o:microchip:gridtime_3000_firmware:*:*:*:*:*:*:*:*
Range: >=1.0r0.03,<1.2r0.0
Microchip/GridTime 3000 GNSS Time Serverllm-fuzzy
Range: 1.0r0.03 - 1.1r0.0

Patches

Vulnerability mechanics

References

1

www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/gridtime-3000-gnss-time-server-access-token-exposurenvdVendor Advisory

News mentions

0

No linked articles in our index yet.