medium6.5

CVE-2026-12620

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints.

Impact

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.

Affected products

Vendor	Product	Affected versions
Microchip	Gridtime 3000 Firmware	from 1.0r0.03 before 1.2r0.0

Weakness classification

CWE-200

References

NVD record
CVE.org record
https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/gridtime-3000-gnss-time-server-access-token-exposure