Read the docs
TI-2026-56607 Aliases CVE-2026-82018GHSA-7c38-49cx-fjvw

IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf File

Priority LOW 32CWE-636Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit GRUB's fail-open signature verification behavior to drop into an interactive GRUB prompt, then boot the device's own kernel with additional command-line arguments to obtain a root shell with the disk unlocked while leaving TPM PCR values unaltered.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00251 16th percentileScored 2026-11-07
Fix Fixed IGEL OS 12 (IGEL): 12.8.3, 12.9.0IGEL OS 11 (IGEL): 11.11.150

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IGELIGEL OS 1212.0.0 – 12.8.212.8.3, 12.9.0Patch availableCNA
IGELIGEL OS 1111.0.0 to before 11.11.15011.11.150Patch availableCNA
  • IGEL OS 12 VendorIGEL Affected 12.0.0 – 12.8.2 Fixed in 12.8.3, 12.9.0 Patch available CNA
  • IGEL OS 11 VendorIGEL Affected 11.0.0 to before 11.11.150 Fixed in 11.11.150 Patch available CNA

Remediation

  • Fix · CNA IGEL OS 12 (IGEL) Fixed in 12.8.3, 12.9.0
  • Fix · CNA IGEL OS 11 (IGEL) Fixed in 11.11.150

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    IGEL OS 11 11.11.150

    2 records Highest priority Priority HIGH 1 HIGH, 1 LOW

    Other records, highest priority first

    • TI-2026-56606 IGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration AreaPriority HIGH 72
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-82018
  2. 2026-10-03 Alias added: GHSA-7c38-49cx-fjvw

References

Patch 1

Other 2

  • TI-2025-30278 In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module… KEVCVSS 3.1MEDIUM 4.6
  • TI-2026-56606 IGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration Area CVSS 4.0HIGH 8.6
  • TI-2022-09377 An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. CVSS 3.1HIGH 8.8
  • TI-2022-09376 An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. CVSS 3.1MEDIUM 6.5
  • TI-2022-09378 An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. CVSS 3.1MEDIUM 5.5
  • TI-2022-09375 An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences