What’s Vulnerable › Vulnerabilities
CVE-2026-6923: Nuvoton - CWE-1300: Improper Protection of Physical Side Channels
- Severity: low (CVSS 3.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-05-14 · updated 2026-10-26
- Weakness: CWE-1300
Description
A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.
Affected products
- Nuvoton NPCT7xx: all versions below 7.2.4.0
References
Get alerted when CVE-2026-6923 or the next vulnerability affects your stack