Medium severity · published Sep 12, 2026
CVE-2026-89172
Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms
5.6
CVSS
0.2%
EPSS
No
On KEV
Description
Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052.
This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
AN1044 · Microchip
through A · source: vendor
AN
AN953 · Microchip
through A · source: vendor
SW
SW300052 · Microchip
through 2.6 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-89172
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-89172
www.microchip.com
https://www.microchip.com/en-us/application-notes/an1044
www.microchip.com
https://www.microchip.com/en-us/application-notes/an953
www.microchip.com
https://www.microchip.com/en-us/development-tool/sw300052
www.microchip.com
https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/side-channel-attack-an1044-an953-sw300052-cryptographic-algorithms