Is CVE-2026-0455 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-0455 being exploited in the wild.

How severe is CVE-2026-0455?

Informational severity, published 12 November 2026.

Is there a fix for CVE-2026-0455?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-0455 attacked?

It is attacked from the adjacent network, in device firmware.

Am I affected by CVE-2026-0455?

Check whether you run Amd Versal AI Edge Series Gen 2. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-0455: AMD Versal AI Edge Series Gen 2 Peripheral Protection Unit access control bypass

CVE-2026-0455 · Severity: info · Published 2026-11-12

The Versal AI Edge Series Gen 2 processors include a Peripheral Protection Unit (XPPU) that is supposed to control access to inter-processor interrupt buffers, but this protection mechanism does not function as intended. An attacker with access to any IPI channel on the SoC can read and write to restricted IPI buffer registers and control spaces that should be protected, potentially allowing information disclosure or system interference.

Vendors: Amd.

Quick answers

Is CVE-2026-0455 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-0455 being exploited in the wild.
How severe is CVE-2026-0455?: Informational severity, published 12 November 2026.
Which products and versions are affected?: AMD Versal AI Edge Series Gen 2.
Is there a fix for CVE-2026-0455?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-0455 attacked?: It is attacked from the adjacent network, in device firmware.
Am I affected by CVE-2026-0455?: Check whether you run Amd Versal AI Edge Series Gen 2. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The XPPU fails to enforce access control on inter-processor interrupt (IPI) buffer register space and no-buffer register control space. Any processor in the SoC with IPI channel access can bypass the intended protection unit restrictions to read and write the entire protected register ranges. This is an access control vulnerability in a hardware security boundary component.

Affected products

AMD Versal AI Edge Series Gen 2

Timeline

2026-11-12: disclosed

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8027.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.