High severityNVD Advisory· Published Nov 12, 2026

CVE-2026-8331

Description

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GitHub/Microchip Timepictra Platforminferred
Microchip/TimePictrallm-fuzzy

Patches

Vulnerability mechanics

References

www.gruppotim.it/en/footer/TIM-red-team.htmlnvd
www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-remote-code-execution-via-file-uploadnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000