barebox

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

barebox records in CISA KEV

No barebox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Barebox 10 records MEDIUM Rauc 2 records LOW

Records

2 records in Rauc · all components

TI-2020-15849 CVE-2020-25860

Time-of-check time-of-use race condition in Pengutronix RAUC

LOW 32

The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for in…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.01446 Published 2020-12-21 Fixed in 1.5 CWE-367

TI-2026-26456 CVE-2026-34155

RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB

LOW 31

RAUC controls the update process on embedded Linux systems.

CVSS 4.0HIGH 7.2 Network Low privileges User interaction EPSS 0.00146 Published 2026-03-31 Fixed in 1.15.2 CWE-196

Open these records in search →

Critical	3
High	8
Medium	3
Low	0
No CVSS	0