Improper verification of cryptographic signature in IGEL OS - CVE-2025-47827
Published: October 14, 2025 / Updated: November 7, 2025
Vulnerability identifier: #VU117018
CSH Severity: High
CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-47827
CWE-ID: CWE-347
Exploitation vector: Local access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows an attacker to bypass implemented security restrictions.
The vulnerability exists due to improper verification of cryptographic signature when mounting a SquashFS image in IGEL OS firmware. An attacker with physical access to the system can bypass Secure Boot protection feature and compromise the affected system.
Note, the vulnerability is being actively exploited in the wild against the Windows users.
Affected software
IGEL OS
Microsoft Windows
Windows Server
Microsoft Windows
Windows Server
How to mitigate CVE-2025-47827
Install updates from vendor's website.
IGEL OS - update to 11.01.100
Microsoft Windows - addressed in versions 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899
Windows Server - addressed in versions 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899
Microsoft Windows - addressed in versions 10 21H2 10.0.19044.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899
Windows Server - addressed in versions 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899