Read the docs
TI-2026-56606 Aliases CVE-2026-82017GHSA-jh8x-f5g5-w4rq

IGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration Area

Priority HIGH 72CWE-345Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-345.

Summary

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader. Attackers can inject malicious kernel command line parameters that execute with boot environment privileges without triggering TPM PCR measurement failures, as the attack does not modify the measured boot code.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00214 11th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed IGEL OS 12 (IGEL): 12.7.6IGEL OS 11 (IGEL): 11.11.150

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IGELIGEL OS 1212.0.0 to before 12.7.612.7.6Patch availableCNA
IGELIGEL OS 1111.0.0 to before 11.11.15011.11.150Patch availableCNA
  • IGEL OS 12 VendorIGEL Affected 12.0.0 to before 12.7.6 Fixed in 12.7.6 Patch available CNA
  • IGEL OS 11 VendorIGEL Affected 11.0.0 to before 11.11.150 Fixed in 11.11.150 Patch available CNA

Remediation

  • Fix · CNA IGEL OS 12 (IGEL) Fixed in 12.7.6
  • Fix · CNA IGEL OS 11 (IGEL) Fixed in 11.11.150

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    IGEL OS 11 11.11.150

    2 records Highest priority Priority HIGH 1 HIGH, 1 LOW

    Other records, highest priority first

    • TI-2026-56607 IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf FilePriority LOW 32
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-82017
  2. 2026-10-03 Alias added: GHSA-jh8x-f5g5-w4rq

References

Exploit 1

Patch 1

Other 2

  • TI-2025-30278 In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module… KEVCVSS 3.1MEDIUM 4.6
  • TI-2022-09377 An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. CVSS 3.1HIGH 8.8
  • TI-2026-56607 IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf File CVSS 4.0MEDIUM 6.8
  • TI-2022-09376 An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. CVSS 3.1MEDIUM 6.5
  • TI-2022-09378 An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. CVSS 3.1MEDIUM 5.5
  • TI-2022-09375 An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences