# CVE-2026-89172

## Summary

- **CVE ID:** CVE-2026-89172
- **Severity:** MEDIUM
- **CVSS Score:** 5.6 (CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N)
- **CWE:** CWE-1300
- **Published:** Sep 12, 2026
- **Last Modified:** Sep 14, 2026

## Description

Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052.

This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.

## Affected Products

- Microchip — AN1044 (0)
- Microchip — AN953 (0)
- Microchip — SW300052 (0)

## References

- [CNA](https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/side-channel-attack-an1044-an953-sw300052-cryptographic-algorithms)
- [CNA](https://www.microchip.com/en-us/application-notes/an1044)
- [CNA](https://www.microchip.com/en-us/application-notes/an953)
- [CNA](https://www.microchip.com/en-us/development-tool/sw300052)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.15%
- **EPSS Percentile:** 4.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._