CVE-2026-6458 | Caliptra Core Runtime up to 2.0.1/2.1.0 aes_256_gcm_update missing cryptographic step (GHSA-834g-h5x6-2hqr)

June 24, 2026 Yanac

A vulnerability classified as problematic was found in Caliptra Core Runtime up to 2.0.1/2.1.0. Impacted is an unknown function of the component aes_256_gcm_update. Executing a manipulation can lead to missing cryptographic step.

The identification of this vulnerability is CVE-2026-6458. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More