ZeroDay Findings
Sign inSign up

Findings

CVE-2025-47827

IGEL OS Use of a Key Past its Expiration Date Vulnerability

Published Jun 5, 2025 · updated Jun 17, 2026 · IGEL IGEL OS

IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 5, 2025 · Catalog

    Detected

    IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

  2. Oct 14, 2025 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Nov 4, 2025 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Jun 17, 2026 · Catalog

    Updated

    IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Nov 4, 2025

Affected

  • cpe igel/igel osversion unspecified
  • cpe microsoft/windows 10 1507version unspecified
  • cpe microsoft/windows 10 1607version unspecified
  • cpe microsoft/windows 10 1809version unspecified
  • cpe microsoft/windows 10 21h2version unspecified
  • vendor IGEL IGEL OSversion unspecified

Sources

  • CISA KEVCVE-2025-47827

    IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

    cisa.gov
  • CVE.orgCVE-2025-47827

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-47827

    30-day exploitation probability 4.9%

    first.org
  • NIST NVDCVE-2025-47827

    In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

    nvd.nist.gov

References