{"items":[{"id":"CVE-2026-89172","published":"2026-09-12T09:26:05.932Z","updated":"2026-09-14T13:00:29.366Z","title":"Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms","severity":"MEDIUM","score":5.6,"vendor":"Microchip","product":"AN1044","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2026-18349","published":"2026-08-24T16:07:45.500Z","updated":"2026-10-27T16:40:02.564Z","title":"SAMA5D44 Fault Injection Vulnerability","severity":"HIGH","score":7.3,"vendor":"Microchip","product":"SAMA5D4","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-12620","published":"2026-06-19T15:59:07.447Z","updated":"2026-06-29T05:22:09.732Z","title":"Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server","severity":"MEDIUM","score":4.6,"vendor":"Microchip","product":"GridTime 3000","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2026-12621","published":"2026-06-19T15:53:38.809Z","updated":"2026-06-29T05:24:24.597Z","title":"Cross-Site Scripting (XSS) Vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time Server","severity":"MEDIUM","score":5.3,"vendor":"Microchip","product":"GridTime 3000","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2026-12622","published":"2026-06-19T15:48:02.931Z","updated":"2026-06-29T05:23:38.475Z","title":"Open Redirect Vulnerability in Password Reset Submission in GridTime™ 3000 GNSS Time Server","severity":"MEDIUM","score":5.3,"vendor":"Microchip","product":"GridTime 3000","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-12619","published":"2026-06-19T15:40:50.609Z","updated":"2026-06-29T05:22:52.398Z","title":"GridTime™ 3000 GNSS Time Server CSRF to XSS","severity":"MEDIUM","score":5.1,"vendor":"Microchip","product":"GridTime 3000","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2026-2336","published":"2026-04-16T17:02:06.352Z","updated":"2026-04-16T17:34:39.672Z","title":"Weak webstax_auth Cookie Authentication Allows Privilege Escalation","severity":"HIGH","score":8.7,"vendor":"Microchip","product":"IStaX","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2025-9497","published":"2026-03-28T10:58:29.620Z","updated":"2026-04-01T13:55:03.527Z","title":"Hardcoded Upgrade Decryption Passwords","severity":"MEDIUM","score":5.5,"vendor":"Microchip","product":"Time Provider 4100","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2026-3010","published":"2026-02-28T11:45:30.301Z","updated":"2026-03-02T15:21:20.403Z","title":"TimePictra Stored Cross-Site Scripting","severity":"CRITICAL","score":9.3,"vendor":"Microchip","product":"TimePictra","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2026-2844","published":"2026-02-28T11:44:07.402Z","updated":"2026-03-02T15:23:13.286Z","title":"TimePictra Authentication Bypass Vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Microchip","product":"TimePictra","kev":false,"epss":0.00285,"kevAdded":null},{"id":"CVE-2025-47904","published":"2026-02-24T15:34:20.905Z","updated":"2026-03-31T10:39:23.425Z","title":"Unsigned upgrade package","severity":"MEDIUM","score":5.7,"vendor":"Microchip","product":"Time Provider 4100","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2025-47902","published":"2025-10-20T17:52:52.844Z","updated":"2026-03-31T10:38:57.976Z","title":"SQL Injection in web resource","severity":"HIGH","score":7.1,"vendor":"Microchip","product":"Time Provider 4100","kev":false,"epss":0.00378,"kevAdded":null},{"id":"CVE-2025-47901","published":"2025-10-20T17:48:20.775Z","updated":"2026-03-31T10:38:33.680Z","title":"RCE on restore configuration password","severity":"HIGH","score":8.9,"vendor":"Microchip","product":"Time Provider 4100","kev":false,"epss":0.0138,"kevAdded":null},{"id":"CVE-2025-47900","published":"2025-10-20T17:43:33.890Z","updated":"2026-03-31T10:38:11.018Z","title":"RCE on backup configuration password","severity":"HIGH","score":8.9,"vendor":"Microchip","product":"Time Provider 4100","kev":false,"epss":0.0138,"kevAdded":null},{"id":"CVE-2024-29155","published":"2024-10-16T15:51:11.819Z","updated":"2025-09-02T14:11:05.181Z","title":"Denial of service on Microchip RN4870 devices","severity":"MEDIUM","score":4.3,"vendor":"Microchip","product":"RN4870","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2024-43683","published":"2024-10-04T19:56:15.872Z","updated":"2024-11-01T15:59:19.229Z","title":"Improper verification of the Host header in TimeProvider 4100","severity":"HIGH","score":8.7,"vendor":"Microchip","product":"TimeProvider 4100","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2024-43684","published":"2024-10-04T19:51:51.926Z","updated":"2025-08-29T20:11:56.019Z","title":"Cross-Site Request Forgery vulnerability in TimeProvider 4100","severity":"HIGH","score":8.7,"vendor":"Microchip","product":"TimeProvider 4100","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2024-43685","published":"2024-10-04T19:48:53.595Z","updated":"2025-08-29T20:21:47.659Z","title":"Session token fixation in TimeProvider 4100","severity":"HIGH","score":8.7,"vendor":"Microchip","product":"TimeProvider 4100","kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2024-43686","published":"2024-10-04T19:47:06.117Z","updated":"2024-10-07T20:42:38.819Z","title":"Reflected XSS in TimeProvider 4100 chart component","severity":"MEDIUM","score":5.4,"vendor":"Microchip","product":"TimeProvider 4100","kev":false,"epss":0.12987,"kevAdded":null},{"id":"CVE-2024-9054","published":"2024-10-04T19:42:44.129Z","updated":"2025-08-29T20:24:45.480Z","title":"Remote code Execution inTimeProvider® 4100","severity":"HIGH","score":8.5,"vendor":"Microchip","product":"TimeProvider 4100","kev":false,"epss":0.15626,"kevAdded":null},{"id":"CVE-2024-43687","published":"2024-10-04T19:41:15.354Z","updated":"2025-05-23T15:13:13.627Z","title":"XSS vulnerability in bannerconfig endpoint in TimeProvider 4100","severity":"HIGH","score":7.7,"vendor":"Microchip","product":"TimeProvider 4100","kev":false,"epss":0.00833,"kevAdded":null},{"id":"CVE-2024-7801","published":"2024-10-04T19:38:08.280Z","updated":"2024-10-04T22:16:19.492Z","title":"SQL injection in get_chart_data in TimeProvider 4100","severity":"MEDIUM","score":6.3,"vendor":"Microchip","product":"TimeProvider 4100","kev":false,"epss":0.00843,"kevAdded":null},{"id":"CVE-2024-7490","published":"2024-08-08T15:01:09.055Z","updated":"2025-08-29T20:23:53.142Z","title":"Remote Code Execution in Advanced Software Framework DHCP server","severity":"CRITICAL","score":9.5,"vendor":"Microchip Techology","product":"Advanced Software Framework","kev":false,"epss":0.01377,"kevAdded":null},{"id":"CVE-2024-30212","published":"2024-05-28T16:07:52.946Z","updated":"2025-02-13T17:47:45.803Z","title":"Microchip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command","severity":"HIGH","score":7,"vendor":"Microchip","product":"MPLAB® Harmony 3 Core Module","kev":false,"epss":0.00568,"kevAdded":null},{"id":"CVE-2024-4760","published":"2024-05-16T13:07:57.462Z","updated":"2025-06-06T15:08:03.023Z","title":"Voltage glitch during startup of the EEFC NVM controller can bypass the security bit","severity":"MEDIUM","score":6.3,"vendor":"Microchip","product":"SAME70","kev":false,"epss":0.00209,"kevAdded":null}]}