CCaliptra

Products

Exploited and recent CVEs

• CVE-2026-11835 Medium 5.6 Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU) 0.1%
• CVE-2026-11836 Low 1.8 Production Debug-Unlock Token Verification Missing Device Binding 0.1%
• CVE-2026-11836 Low 1.8 Production Debug-Unlock Token Verification Missing Device Binding 0.1%
• CVE-2026-7328 Medium 6.8 Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service 0.1%
• CVE-2026-5818 High 7.2 MCU Firmware Update Authentication Bypass on Caliptra Core 0.2%
• CVE-2026-6458 Medium 5.1 AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is Empty 0.2%