Vulnerabilities

TI-2026-56607 CVE-2026-82018 · GHSA-7c38-49cx-fjvw

IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf File

LOW 32

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing…

CVSS 4.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00251 Published 2026-08-28 Fixed in 12.8.3, 12.9.0 +1 CWE-636

TI-2026-56606 CVE-2026-82017 · GHSA-jh8x-f5g5-w4rq

IGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration Area

HIGH 72

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an…

CVSS 4.0HIGH 8.6 Physical No auth No interaction EPSS 0.00214 Published 2026-08-28 Fixed in 12.7.6, 11.11.150 CWE-345

TI-2025-30278 CVE-2025-47827 · GHSA-pww7-j9v6-xc6j

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module…

HIGH 78KEV

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.05153 Published 2025-06-05 No fix listed CWE-347

TI-2022-09375 CVE-2022-25804 · GHSA-pj5f-xpv5-qrpr

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

LOW 25

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00284 Published 2022-06-09 No fix listed CWE-276

TI-2022-09376 CVE-2022-25805 · GHSA-9j28-82fg-7vjq

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

LOW 30

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00593 Published 2022-06-09 No fix listed CWE-319

TI-2022-09377 CVE-2022-25806 · GHSA-pr36-wjfv-22vh

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

MEDIUM 40

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01006 Published 2022-06-09 No fix listed CWE-798

TI-2022-09378 CVE-2022-25807 · GHSA-p6xg-79j4-4pv6

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

LOW 25

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00299 Published 2022-06-09 No fix listed CWE-798

Vulnerabilities

Filters

IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf File

IGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration Area

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module…

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100.