Improper Authentication in Bootgen Affects AMD Products
CVE-2026-0460

1LOW

Key Information:

Vendor

Amd
Status
Bootgen
Vendor
CVE Published:
12 November 2026

What is CVE-2026-0460?

The Bootgen tool developed by AMD is susceptible to an improper authentication vulnerability that may lead to the use of a fixed salt value for RSA padding. This could undermine data integrity during cryptographic operations, thereby posing a significant risk of unauthorized data modification. It is crucial for users and organizations leveraging affected Bootgen versions to assess their security posture and apply necessary mitigations.

Affected Version(s)

Bootgen 2026.1

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
1
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.