[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXCEQrY0_Xt3jdqMui_h6L6Nlxztazpm3ZG_3SFewHqc":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":27,"kevVulnerabilities":56,"topProductsByCves":62,"seoMetadata":65,"meta":74},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":26},14258,"igel",2,5,1,42,"2025-06-05","i",[16,22],{"id":17,"product_name":18,"version_count":11,"cve_count":19,"kev_count":20,"last_cve_update":21},79899,"universal_management_suite",4,0,"2022-06-09",{"id":23,"product_name":24,"version_count":25,"cve_count":11,"kev_count":11,"last_cve_update":13},79898,"igel_os",41,"Igel is a technology vendor with 2 tracked products and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[28,35,42,47,52],{"cveId":29,"description":30,"publishedDate":13,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":4,"epssScore":34},"CVE-2025-47827","In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.",4.6,"v3.1","Medium",0.04927,{"cveId":36,"description":37,"publishedDate":21,"cvssScore":38,"cvssVersion":32,"severity":39,"isKev":40,"epssScore":41},"CVE-2022-25806","An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the PrefDBCredentials class allows an attacker, who has discovered encrypted superuser credentials, to decrypt those credentials using a static 8-byte DES key.",8.8,"High",false,0.0099,{"cveId":43,"description":44,"publishedDate":21,"cvssScore":45,"cvssVersion":32,"severity":33,"isKev":40,"epssScore":46},"CVE-2022-25805","An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. The transmission of cleartext LDAP bind credentials by the cmd_mgt_load_mgt_tree command allows an attacker (who can intercept or inspect traffic between an authenticated UMS client and server) to compromise those LDAP bind credentials.",6.5,0.00583,{"cveId":48,"description":49,"publishedDate":21,"cvssScore":50,"cvssVersion":32,"severity":33,"isKev":40,"epssScore":51},"CVE-2022-25807","An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the LDAPDesPWEncrypter class allows an attacker, who has discovered encrypted LDAP bind credentials, to decrypt those credentials using a static 8-byte DES key.",5.5,0.00295,{"cveId":53,"description":54,"publishedDate":21,"cvssScore":50,"cvssVersion":32,"severity":33,"isKev":40,"epssScore":55},"CVE-2022-25804","An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. Insecure permissions for the serverconfig registry key (under JavaSoft\\Prefs\\de\\igel\\rm\\config in HKEY_LOCAL_MACHINE\\SOFTWARE) allow an unprivileged local attacker to read the encrypted dbuser and dbpassword values for the UMS superuser.",0.0028,[57],{"cveId":29,"description":30,"publishedDate":13,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":4,"epssScore":34,"cisaVulnName":58,"cisaDateAdded":59,"cisaShortDescription":60,"cisaRequiredAction":61},"IGEL OS Use of a Key Past its Expiration Date Vulnerability","2025-10-14","IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",[63,64],{"id":17,"product_name":18,"version_count":11,"cve_count":19,"kev_count":20,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":11,"kev_count":11,"last_cve_update":13},{"title":66,"metaDescription":67,"keywords":68,"structuredData":69},"Igel - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Igel covering 2 products with 5 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Igel vulnerabilities, Igel security, Igel CVE, Igel threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Igel KEV, Igel exploited vulnerabilities",{"@context":70,"@type":71,"name":72,"description":67,"url":73},"https:\u002F\u002Fschema.org","Organization","Igel","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Figel",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":75,"apiVersion":76},"2026-10-17T15:53:20.644Z","3.0"]