This vulnerability (CVE-2026-89172) concerns improper protection against physical side channels in Microchip's AN1044, AN953, and SW300052 products. The affected versions are AN1044 up to version A, AN953 up to version A, and SW300052 up to version 2.6. The issue is categorized under CWE-1300, which involves insufficient protection of physical side channels that may allow attackers with physical access to extract sensitive information. The CVSS 4.0 vector indicates a physical attack vector with high complexity and partial attack requirements, no privileges or user interaction needed, and high impact on confidentiality. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

The vulnerability allows attackers with physical access to the affected devices to potentially exploit side channels to extract sensitive information. The CVSS score of 5.6 indicates a medium severity impact primarily affecting confidentiality. There is no indication of privilege escalation, integrity, or availability impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Microchip's advisories for updates. Physical security controls to restrict access to affected devices may reduce risk until a fix is available.