CVE-2026-12619 — GridTime™ 3000 GNSS Time Server CSRF to XSS

CVE-2026-12619

GridTime™ 3000 GNSS Time Server CSRF to XSS PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS). This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.

Affected (CNA)

Vendor / product	Versions
Microchip / GridTime 3000	affected 1.0r0.03 through 1.1r0.0

CWE

CWE-79

References

https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/gridtime-3000-gnss-time-server-csrf-to-xss

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.