Vulnerability in Caliptra Core Firmware
CVE-2026-11836
Insufficient verification of data authenticity in Caliptra Core ROM and Core Firmware (validate_debug_unlock_token()) in subsystem mode allows an attacker with access to the integrator's debug unlock signing service to unlock production de…
Affected products
- Caliptra Core Firmware — versions 2.0.0, 2.0.2, 2.1.0
- Caliptra Core Rom — versions 2.0.0, 2.0.3, 2.1.0