Skip to content

CVE · Exploited · On CISA KEV

CVE-2025-47827

IGEL OS Use of a Key Past its Expiration Date Vulnerability

4.6
CVSS 3.1
1
story
OCT 14
added to KEV
Severity
4.6 Medium · vendor score
Vendor
IGEL
Product
IGEL OS
Published
Jun 5, 2025
Added to KEV
Oct 14, 2025
KEV deadline
Nov 4, 2025
Ransomware use
Unknown
Weakness
CWE-347

What it is

IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesMicrosoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseMicrosoft issued fixes for several actively exploited vulnerabilities in its latest patch Tuesday release.LINDSEY O'DONNELL-WELCH · 2 MIN

Official references

6 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Exploitgithub.com/Zedeldi/CVE-2025-47827Exploitgithub.com/Zedeldi/CVE-2025-47827Analysismsrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-47827