CVE-2026-2844: TimePictra Authentication Bypass Vulnerability
Published Feb 28, 2026
·Updated
Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2.
Affected Software
4 affected components
Microchip TimePictra>=11.0<11.3 SP2
Microchip TimePictra>=11.0<=11.3
Microchip TimePictra=11.3-sp1
Microchip TimePictra=11.3-sp2
Event History
Feb 28, 2026
CVE Published
via MITRE·11:44 AM
Data Sourced
via MITRE·11:44 AM
DescriptionWeakness
Data Sourced
via NVD·12:16 PM
DescriptionSeverityWeaknessAffected Software
Aug 26, 58161
Event
via FIRST·10:30 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-2844?
CVE-2026-2844 is classified as a critical vulnerability due to its potential for unauthorized access to critical functions.
2
How do I fix CVE-2026-2844?
To fix CVE-2026-2844, users should upgrade TimePictra to a version above 11.3 SP2 where the vulnerability is addressed.
3
What systems are affected by CVE-2026-2844?
CVE-2026-2844 affects Microchip TimePictra versions 11.0 through 11.3 SP2.
4
What is the nature of the vulnerability in CVE-2026-2844?
CVE-2026-2844 is an authentication bypass vulnerability that allows for configuration and environment manipulation.
5
Can CVE-2026-2844 lead to data breaches?
Yes, CVE-2026-2844 can result in unauthorized access, which could lead to potential data breaches.