CVE-2026-12620

Medium · 6.5

CVSS

6.5

EPSS

0.4%

Published

Jun 19, 2026

CISA due date

—

The record

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.

Affected packages

Ecosystem	Package	Introduced	Fixed