CVE-2026-12621

EUVD-2026-38040
Improper neutralization of input during web page generation XSS 
vulnerability in the GridTime 3000 (password reset form) allows XSS. 
This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/gridtime-3000-gnss-time-server-dom-xss