Search/CVE-2026-5818

● CVE

CVE-2026-5818

Incorrect check of function return value in Caliptra Core Runtime Firmware (ActivateFirmwareCmd::activate_fw modules) allows bypass of Caliptra Core's verification of the MCU FW during a hitless update. This issue affects Core Runtime Firmware: from 2.0.0 through 2.0.1, 2.1.0.

View graph Watch Export

CVSS v3.1

—

EPSS

0.24%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Connections

1 relationships

Timeline

disclosure → media coverage

Jun 24, 2026

Disclosure — published as a CVE record.