CVE-2026-89172 Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms
Attackers can exploit physical side channels in Microchip cryptographic algorithms to potentially disclose sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-89172?
CVE-2026-89172 is a medium-severity vulnerability in Microchip AN1044, published on 12 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052.
This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.
Weakness: CWE-1300
Which versions are affected by CVE-2026-89172?
How do I fix CVE-2026-89172?
No fix has been published for CVE-2026-89172 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-89172 being exploited?
There is no known exploitation of CVE-2026-89172 in the wild and no public exploit code.
Sources
Also known as GHSA-pxq3-m9x7-5w4m.