CVE-2026-5818

The record

Incorrect check of function return value in Caliptra Core Runtime Firmware (ActivateFirmwareCmd::activate_fw modules) allows bypass of Caliptra Core's verification of the MCU FW during a hitless update. This issue affects Core Runtime Firmware: from 2.0.0 through 2.0.1, 2.1.0.

Affected packages

Related vulnerabilities

• CVE-2026-15686 Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution… CWE-253
• CVE-2026-59847 A flaw was found in libssh. CWE-253
• CVE-2026-46419 Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly… CWE-253
• CVE-2026-43863 mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. CWE-253
• GHSA-88ch-q68x-36v7 uutils coreutils has an Incorrect Check of Function Return Value CWE-253
• GHSA-vp6q-mv9j-j428 uutils coreutils incorrectly handles exit codes when processing multiple files CWE-253
• CVE-2026-35340 A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities… CWE-253
• CVE-2026-35339 The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit… CWE-253