CVE-2026-5818
NONE—CVSS v3
—CVSS v2
0.16%
EPSS (exploit probability)
CWE-253CWE
Description
Incorrect check of function return value in Caliptra Core Runtime Firmware (ActivateFirmwareCmd::activate_fw modules) allows bypass of Caliptra Core's verification of the MCU FW during a hitless update.
This issue affects Core Runtime Firmware: from 2.0.0 through 2.0.1, 2.1.0.
Affected routers (0)
No routers currently mapped to this CVE in our database.