CVE-2026-12620 — Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server

CVE-2026-12620

Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server PUBLISHED

Description (CNA)

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.

Affected (CNA)

Vendor / product	Versions
Microchip / GridTime 3000	affected 1.0r0.03 through 1.1r0.0

CWE

CWE-200

References

https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/gridtime-3000-gnss-time-server-access-token-exposure

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.