← CVE Intelligence

CVE-2026-5818

MCU Firmware Update Authentication Bypass on Caliptra Core PUBLISHED

Description (CNA)

Incorrect check of function return value in Caliptra Core Runtime Firmware (ActivateFirmwareCmd::activate_fw modules) allows bypass of Caliptra Core's verification of the MCU FW during a hitless update. This issue affects Core Runtime Firmware: from 2.0.0 through 2.0.1, 2.1.0.

Affected (CNA)

Vendor / productVersions
Caliptra / Core Runtime Firmwareaffected 2.0.0 through 2.0.1; affected 2.1.0; unaffected 2.0.2; unaffected 2.1.1

CWE

CWE-253

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.