Skip to content
OpenAdvisories
High · 8.8 CVE-2026-8331 EUVD-2026-124293GHSA-5993-pcpw-x8xp

TimePictra ermote code execution via file upload

Published Nov 12, 2026 · Updated Nov 12, 2026 · Assigned by Microchip

Description

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution.

Affected products

VendorProductAffectedFixed
Microchip TimePictra < 12.0 12.0

References