Skip to content
OpenAdvisories

Vendor

Caliptra

5 known vulnerabilities.

Products

Core Runtime Firmware 3 Core ROM 2 Core Firmware 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.8
    CVE-2026-11836

    Production Debug-Unlock Token Verification Missing Device Binding

    Insufficient verification of data authenticity in Caliptra Core ROM and Core Firmware (validate_debug_unlock_token()) in subsystem mode allows an attacker with access to the integrator's debug unlock signing service to unlock production debug on an unintended…

    Caliptra Core ROM Core Firmware