What’s Vulnerable › Products

Caliptra Core Runtime Firmware vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Caliptra Core Runtime Firmware version is affected

Latest Caliptra Core Runtime Firmware vulnerabilities

• CVE-2026-7328 — Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service (CVSS 6.8)
• CVE-2026-6458 — AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is Empty (CVSS 5.1)
• CVE-2026-5818 — MCU Firmware Update Authentication Bypass on Caliptra Core (CVSS 7.2)