CVE-2025-47827

CVE-2025-47827 is a critical vulnerability in IGEL OS (versions prior to 11) and Microsoft products that allows for a Secure Boot bypass. This flaw stems from improper cryptographic signature verification in the igel-flash-driver module, enabling an attacker to mount a crafted root filesystem from an unverified SquashFS image. The vulnerability has a CVSS score of 4.6 (MEDIUM) but a FAUCET Risk Score of 98/100, indicating a high practical risk, with a low attack complexity and no user interaction required, potentially leading to a complete compromise of system integrity. Notably, this CVE is actively exploited (KEV listed) and has garnered significant community discussion and media coverage, despite a lack of public exploit code in Metasploit or ExploitDB. Microsoft has released a fix, which can be applied via fwupdmgr for relevant systems.