CVE-2026-5818 – MCU Firmware Update Authentication Bypass on Caliptra Core

CVE ID :CVE-2026-5818

Published : June 23, 2026, 11:50 p.m. | 1 hour, 54 minutes ago

Description :Incorrect check of function return value in Caliptra Core Runtime Firmware (ActivateFirmwareCmd::activate_fw modules) allows bypass of Caliptra Core’s verification of the MCU FW during a hitless update.

This issue affects Core Runtime Firmware: from 2.0.0 through 2.0.1, 2.1.0.

Severity: 7.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…