Boot Parameter Injection Vulnerability in IGEL OS by IGEL Technology
CVE-2026-82017

8.6HIGH

Key Information:

Vendor

Igel

Status
Igel Os 12
Igel Os 11
Vendor
CVE Published:
28 August 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-82017?

The IGEL OS versions prior to 12.7.6 and 11.11.150 are susceptible to a boot parameter injection vulnerability. This vulnerability can be exploited by attackers who have physical access to the device, enabling them to inject malicious Linux loader parameters. This is achieved by modifying an unencrypted and unsigned configuration area that the signed bootloader reads, allowing unauthorized command line parameters to be executed with elevated privileges. Importantly, this attack does not compromise measured boot integrity since it does not alter the boot code that triggers TPM PCR measurement failures.

Affected Version(s)

IGEL OS 11 11.0.0

IGEL OS 12 12.0.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-82017 - Proof of Concept

References

https://kb.igel.com/en/security-safety/current/isn-2026-1...
vendor-advisorypatch
https://blog.amberwolf.com/blog/2026/august/thin-client-t...
technical-description
https://media.defcon.org/DEF%20CON%2034/DEF%20CON%2034%20...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Darren McDonald from AmberWolf
.