Mehrere Schwachstellen (CVE-2026-2844, CVE-2026-3010) in Microchip

Zusammenfassung

Eine kritische Sicherheitslücke (CVE-2026-3010) in Microchips TimePictra-Software ermöglicht Angreifern das Einschleusen von bösartigem Code in Web-Oberflächen. Dadurch können Vertraulichkeit und Integrität sensibler Daten kompromittiert werden. Betroffen sind Versionen 11.0 bis 11.3 SP2. Anwender sollten umgehend die empfohlenen Sicherheitsupdates einspielen, um sich vor dieser Bedrohung zu schützen.

Microchip - Timepictra - CRITICAL - CVE-2026-3010. An issue has been identified in Microchip TimePictra, where improper handling of input during web page generation may lead to a Cross-Site Scripting (XSS) vulnerability. This allows attackers to inject malicious scripts into web pages viewed by users, potentially compromising the confidentiality and integrity of sensitive data. The vulnerability affects multiple versions of TimePictra, specifically from 11.0 through 11.3 SP2. Users are advised to apply the recommended security patches to mitigate this threat. For detailed information and reporting potential vulnerabilities, visit Microchip's official advisory page.