CVE-2026-46728

Published May 16th, 2026

View on NVD ↗

CVSS v3

8.2

HIGH

CVSS v2

N/A

Affected

2

PROJECTS

Description

Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.

"Das U-Boot" Source Tree

GitHub

5.1K

barebox/barebox

The barebox bootloader - Mirror of ssh://[email protected]/barebox

GitHub

305