Advisories · Technology

Caliptra Core Runtime Firmware.

Every CVE that names Caliptra Core Runtime Firmware among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-7328 CVE record

CVSS 6.8 Medium

Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service
- Caliptra Core Runtime Firmware
- Broken access control
Not analysed yet 22 Jul 2026
CVE-2026-5818 CVE record

CVSS 7.2 High

MCU Firmware Update Authentication Bypass on Caliptra Core
- Caliptra Core Runtime Firmware
- CWE-253
Not analysed yet 23 Jun 2026
CVE-2026-6458 CVE record

CVSS 5.1 Medium

AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is Empty
- Caliptra Core Runtime Firmware
- CWE-325
Not analysed yet 23 Jun 2026