Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.2
CVE-2026-46728: Das U-Boot FIT Signature Verification Bypass
CVE-2026-46728
Summary
Das U-Boot, a bootloader, has a security weakness that allows attackers to bypass a security check. This could potentially allow malicious code to run on devices that use this bootloader. Update to the latest version to fix this issue.
Original title
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
Original description
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
nvd CVSS3.1
8.2
Vulnerability type
CWE-346
Published: 16 May 2026 · Updated: 19 May 2026 · First seen: 16 May 2026