U-Boot Vulnerabilities Enable Stealthy Firmware Attacks

• •Six critical vulnerabilities in U-Boot allow pre-OS code execution.
• •CVE-2026-46728 enables bypass of firmware signature verification.
• •Patches are available, but many devices may remain vulnerable.

Six vulnerabilities in the U-Boot bootloader's FIT signature verification code have been disclosed, notably CVE-2026-46728, which allows attackers to bypass firmware signature checks and execute arbitrary code during the boot process. These vulnerabilities affect over 50 stable releases of U-Boot and various embedded devices, including enterprise servers, IoT devices, and networking equipment. Exploitation can occur before the operating system loads, making detection challenging. Binarly, the firm behind the discovery, has reported that while there are no confirmed instances of exploitation in the wild, proof-of-concept code is available. The vulnerabilities include memory corruption and denial of service, with the most flaw rated at CVSS 8.2 (High). Patches have been accepted into the U-Boot codebase, but many devices may remain if vendors do not update their firmware. The attack vector includes both physical access and remote exploitation through insecure update paths.