medium5.4

CVE-2026-12622

The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission.

Impact

The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.

Affected products

Vendor	Product	Affected versions
Microchip	Gridtime 3000 Firmware	from 1.0r0.03 before 1.2r0.0

Weakness classification

CWE-601

References

NVD record
CVE.org record
https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/gridtime-3000-gnss-time-server-open-redirect