Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

Caliptra vulnerabilities

5 published CVEs name Caliptra among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-11835

    Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU)

    Caliptra · Core ROM

    Medium5.6
  • CVE-2026-11836

    Production Debug-Unlock Token Verification Missing Device Binding

    Caliptra · Core ROM

    Low1.8
  • CVE-2026-7328

    Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service

    Caliptra · Core Runtime Firmware

    Medium6.8
  • CVE-2026-5818

    MCU Firmware Update Authentication Bypass on Caliptra Core

    Caliptra · Core Runtime Firmware

    High7.2
  • CVE-2026-6458

    AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is Empty

    Caliptra · Core Runtime Firmware

    Medium5.1
All 5 in the list