CVEPublished 2026-06-25Modified 2026-06-250 articles on news5 live referencesNVD data

CVE-2026-4930

Vulnerability data via NVD (ingested)

CVSS v3.1
EPSS percentile
Description

SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations (AES encryption/decryption and hashing). DPA Countermeasures on SYMCRYPTO can be weakened (reduced entropy) by forcing certain seed values if an attacker gains code execution capability on the impacted device. * Therefore, the keys loaded on SYMCRYPTO may be more vulnerable to extraction through DPA attacks than intended

Timeline
Published 2026-06-25
Modified 2026-06-25

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub (4)

We haven't classified any articles referencing CVE-2026-4930 yet. The external references above still apply.