What’s Vulnerable › Products

Caliptra Core ROM vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Caliptra Core ROM version is affected

Latest Caliptra Core ROM vulnerabilities

• CVE-2026-11836 — Production Debug-Unlock Token Verification Missing Device Binding (CVSS 1.8)
• CVE-2026-11835 — Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU) (CVSS 5.7)