Caliptra Core Runtime Firmware

• CVE-2026-7328 Medium 6.8 Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service 0.1%
• CVE-2026-5818 High 7.2 MCU Firmware Update Authentication Bypass on Caliptra Core 0.2%
• CVE-2026-6458 Medium 5.1 AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is Empty 0.2%