Vulnerability Details CVE-2026-46728
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 11.6%
CVSS Severity
CVSS v3 Score 8.2
Products affected by CVE-2026-46728
-
cpe:2.3:a:denx:u-boot:2013.07
-
cpe:2.3:a:denx:u-boot:2013.10
-
cpe:2.3:a:denx:u-boot:2014.01
-
cpe:2.3:a:denx:u-boot:2014.04
-
cpe:2.3:a:denx:u-boot:2014.07
-
cpe:2.3:a:denx:u-boot:2014.10
-
cpe:2.3:a:denx:u-boot:2015.01
-
cpe:2.3:a:denx:u-boot:2015.04
-
cpe:2.3:a:denx:u-boot:2015.07
-
cpe:2.3:a:denx:u-boot:2015.10
-
cpe:2.3:a:denx:u-boot:2016.01
-
cpe:2.3:a:denx:u-boot:2016.03
-
cpe:2.3:a:denx:u-boot:2016.05
-
cpe:2.3:a:denx:u-boot:2016.07
-
cpe:2.3:a:denx:u-boot:2016.09
-
cpe:2.3:a:denx:u-boot:2016.09.01
-
cpe:2.3:a:denx:u-boot:2016.11
-
cpe:2.3:a:denx:u-boot:2017.01
-
cpe:2.3:a:denx:u-boot:2017.03
-
cpe:2.3:a:denx:u-boot:2017.05
-
cpe:2.3:a:denx:u-boot:2017.07
-
cpe:2.3:a:denx:u-boot:2017.09
-
cpe:2.3:a:denx:u-boot:2017.11
-
cpe:2.3:a:denx:u-boot:2018.01
-
cpe:2.3:a:denx:u-boot:2018.03
-
cpe:2.3:a:denx:u-boot:2018.05
-
cpe:2.3:a:denx:u-boot:2018.07
-
cpe:2.3:a:denx:u-boot:2018.09
-
cpe:2.3:a:denx:u-boot:2018.11
-
cpe:2.3:a:denx:u-boot:2019.01
-
cpe:2.3:a:denx:u-boot:2019.04
-
cpe:2.3:a:denx:u-boot:2019.07
-
cpe:2.3:a:denx:u-boot:2019.10
-
cpe:2.3:a:denx:u-boot:2020.01
-
cpe:2.3:a:denx:u-boot:2020.04
-
cpe:2.3:a:denx:u-boot:2020.07
-
cpe:2.3:a:denx:u-boot:2020.10
-
cpe:2.3:a:denx:u-boot:2021.01
-
cpe:2.3:a:denx:u-boot:2021.04
-
cpe:2.3:a:denx:u-boot:2022.01
-
cpe:2.3:a:denx:u-boot:2022.04
-
cpe:2.3:a:denx:u-boot:2022.07
-
cpe:2.3:a:denx:u-boot:2022.10
-
cpe:2.3:a:denx:u-boot:2023.01
-
cpe:2.3:a:denx:u-boot:2023.04
-
cpe:2.3:a:denx:u-boot:2023.07
-
cpe:2.3:a:denx:u-boot:2023.07.02
-
cpe:2.3:a:denx:u-boot:2023.10
-
cpe:2.3:a:denx:u-boot:2024.01
-
cpe:2.3:a:denx:u-boot:2024.04
-
cpe:2.3:a:denx:u-boot:2024.07
-
cpe:2.3:a:denx:u-boot:2024.10
-
cpe:2.3:a:denx:u-boot:2025.01
-
cpe:2.3:a:denx:u-boot:2025.04
-
cpe:2.3:a:denx:u-boot:2025.07
-
cpe:2.3:a:denx:u-boot:2025.10
-
cpe:2.3:a:denx:u-boot:2026.01
-
cpe:2.3:a:denx:u-boot:2026.04