CVE-2026-18796

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-09-07

Last updated on: 2026-09-09

Assigner: YesWeHack

Description

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-07

Last Modified

2026-09-09

Generated

2026-10-17

AI Q&A

2026-09-07

EPSS Evaluated

2026-10-16

NVD

CVE-2026-18796

EUVD

EUVD-2026-72300

Affected Vendors & Products

Vendor	Product	Version / Range
Nordic	Semiconductor	ASA nRF5340 All build codes

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1342	The processor does not properly clear microarchitectural state after incorrect microcode assists or speculative execution, resulting in transient execution.

Attack-Flow Graph

Executive Summary

This vulnerability affects applications using external QSPI flash for encrypted execute-in-place (XIP) on nRF5340 devices. The weakness lies in the on-the-fly decryption scheme, which may fail to ensure confidentiality and integrity of externally stored code.

Detection Guidance

This vulnerability affects systems using nRF5340 with external QSPI flash for encrypted XIP. Detection requires checking if your device uses this configuration and if the on-the-fly decryption scheme is implemented. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow unauthorized access to sensitive code or data stored in external QSPI flash. Attackers might read, modify, or execute malicious code, leading to potential system compromise or data breaches.

Compliance Impact

This vulnerability affects compliance with GDPR and HIPAA by potentially compromising the confidentiality and integrity of externally stored code on nRF5340 devices. Since the weakness is in the on-the-fly decryption scheme for QSPI flash, unauthorized access or tampering could lead to data breaches or unauthorized code execution, violating data protection requirements under these regulations.

Mitigation Strategies

Immediate mitigation steps include reviewing the nRF Connect SDK implementation for the decryption scheme, ensuring encryption is properly configured, and updating firmware if patches are available. No specific commands or patches are mentioned in the context.

Hi! I’m here to help you understand CVE-2026-18796. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70