SB2025101462 - Secure Boot bypass in IGEL OS
Published: October 14, 2025 Updated: November 7, 2025
Security Bulletin ID
SB2025101462
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Physical access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper verification of cryptographic signature (CVE-ID: CVE-2025-47827)
The vulnerability allows an attacker to bypass implemented security restrictions.
The vulnerability exists due to improper verification of cryptographic signature when mounting a SquashFS image in IGEL OS firmware. An attacker with physical access to the system can bypass Secure Boot protection feature and compromise the affected system.
Note, the vulnerability is being actively exploited in the wild against the Windows users.
Remediation
Install update from vendor's website.