CVE-2026-18796 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-1342	Information Exposure through Microarchitectural State after Transient Execution The processor does not properly clear microarchitectural state after incorrect microcode assists or speculative execution, resulting in transient execution.

참고 자료

https://docs.nordicsemi.com/r/bundle/struct_sa/page/struct/sa.html