PT-2026-22466 · Microchip · Timepictra

Bastion Security + 1 · Published 2026-02-28 · Updated 2026-03-10 · CVE-2026-2844

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Microchip TimePictra versions 11.0 through 11.3 SP2

Description A missing authentication check for a critical function exists in Microchip TimePictra, potentially allowing for configuration and environment manipulation.

Recommendations Versions prior to 11.0 and after 11.3 SP2 are not affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-2844

Affected Products

Timepictra

References · 9

• https://microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-authentication-bypass-vulnerability · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-2844 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2844 · Security Note
• https://twitter.com/VulmonFeeds/status/2027728207219142759 · Twitter Post
• https://twitter.com/cyberbivash/status/2027775134300319900 · Twitter Post
• https://twitter.com/CVEnew/status/2027744203187356032 · Twitter Post
• https://t.me/CVEtracker/46040 · Telegram Post
• https://t.me/cveNotify/153640 · Telegram Post
• https://t.me/cveNotify/154911 · Telegram Post