Nordic Semiconductor ASA
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| nRF Connect SDK | 1 | – | Sep 7, 2026 |
| nRF5340 | 1 | – | Sep 7, 2026 |
| nRF54H20 | 1 | – | Sep 7, 2026 |
Exploited and recent CVEs
- CVE-2026-18796 QSPI flash encryption side-channel leakage 0.1%
- CVE-2026-14297 The Continuous Glucose Monitoring Service's Record Access Control Point (RACP) write handler `memcpy`s the entire attacker-supplied ATT write value into a fixed 20-byte BSS buffer. 0.2%
- CVE-2026-14296 nRF54H20: MCUBoot can be tricked to executing unauthenticated code 0.2%