CVE-2026-6923: Nuvoton NPCT7XX

Low severity, CVSS 3.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.

Affected products

• Nuvoton NPCT7XX: before 7.2.4.0 (fixed in 7.2.4.0)

Published 2026-05-14. Last modified 2026-06-17.