CVE-2026-46728
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
Published May 16, 2026 · updated Sep 11, 2026 · denx u-boot
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
May 16, 2026 · NIST NVD
Detected
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
Sep 11, 2026 · NIST NVD
Updated
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
Affected
- cpe denx/u-bootversion unspecified
- cpe denx/u-boot2026.04
Sources
- CVE.orgVulnerability recordCVE-2026-46728
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-46728
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
nvd.nist.gov