Critical · 9.3 CVE-2026-2844 EUVD-2026-9101GHSA-5c35-7h7v-hvp9

TimePictra Authentication Bypass Vulnerability

Published Feb 28, 2026 · Updated Mar 2, 2026 · Assigned by Microchip

Description

Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2.

Affected products

Vendor	Product	Affected	Fixed
Microchip	TimePictra	11.0 – ≤ 11.3 SP2	—

References

https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-authentication-bypass-vulnerability vendor-advisory