GHSA-5993-pcpw-x8xpHigh
An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra...
🔗 CVE IDs covered (1)
📋 Description
An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution.
🔗 References (4)
- https://nvd.nist.gov/vuln/detail/CVE-2026-8331
- https://www.gruppotim.it/en/footer/TIM-red-team.html
- https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-remote-code-execution-via-file-upload
- https://github.com/advisories/GHSA-5993-pcpw-x8xp