VULNERABILITY INTELLIGENCE
CVE-2026-5818
CVSS score7.2 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-06-24
Last modified2026-10-25
CVSS vectorCVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H
Description
Incorrect check of function return value in Caliptra Core Runtime Firmware (ActivateFirmwareCmd::activate_fw modules) allows bypass of Caliptra Core's verification of the MCU FW during a hitless update. This issue affects Core Runtime Firmware: from 2.0.0 through 2.0.1, 2.1.0.
Weakness classification
- CWE-253: Incorrect Check of Function Return Value