Search/CVE-2026-5818
● CVE

CVE-2026-5818

DiscoveredJun 24, 2026UpdatedOct 25, 2026

Incorrect check of function return value in Caliptra Core Runtime Firmware (ActivateFirmwareCmd::activate_fw modules) allows bypass of Caliptra Core's verification of the MCU FW during a hitless update. This issue affects Core Runtime Firmware: from 2.0.0 through 2.0.1, 2.1.0.

View graph Watch Export
CVSS v3.1
—
EPSS
0.24%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
1 relationships
Timeline
disclosure → media coverage
Jun 24, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 25, 2026