CVE-2026-8333

CVSS 9.4 (critical) · published 2026-11-12

A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page

Weakness: CWE-79

Source: NVD CVE-2026-8333

References

• https://www.gruppotim.it/en/footer/TIM-red-team.html
• https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timepictra-stored-cross-site-scripting-vulnerability

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.