CVE-2026-18796 – Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies

Any application that
uses external QSPI flash for encrypted XIP on nRF5340 and relies on that
encryption for confidentiality and/or integrity of the externally stored
code. No specific nRF Connect SDK version is the root cause; the weakness
is in the on-the-fly decryption scheme.