Browse all 5 CVE security advisories affecting Caliptra. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-11835 | Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU) — Core ROM CWE-367 | 5.6 | Medium | 2026-08-04 |
| CVE-2026-11836 | Production Debug-Unlock Token Verification Missing Device Binding — Core ROM CWE-345 | 1.8 | Low | 2026-08-04 |
| CVE-2026-7328 | Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service — Core Runtime Firmware CWE-862 | - | - | 2026-07-22 |
| CVE-2026-5818 | MCU Firmware Update Authentication Bypass on Caliptra Core — Core Runtime Firmware CWE-253 | - | - | 2026-06-23 |
| CVE-2026-6458 | AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is Empty — Core Runtime Firmware CWE-325 | - | - | 2026-06-23 |
This page lists every published CVE security advisory associated with Caliptra. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.