IGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration Area

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-82017 · Microsoft / collected KEV context

cve-program · CVE-2026-82017

• https://kb.igel.com/en/security-safety/current/isn-2026-19-code-execution-via-boot-registry
• https://blog.amberwolf.com/blog/2026/august/thin-client-thin-crypto-overview/
• https://media.defcon.org/DEF%20CON%2034/DEF%20CON%2034%20presentations/DEF%20CON%2034%20presentations/DEF%20CON%2034%20-%20Darren%20McDonald%20-%20Thin%20Client%20Thin%20Crypto%20-%20Bypassing%20Full-Desk%20Encryption%20Across%20Three%20Major%20Thin%20Clients%20Vendors%20without%20Breaking%20a%20Ci.pdf
• https://github.com/AmberWolfCyber/DEFCON34-ThinClientThinCrypto/blob/main/scripts/igel/inject_bootreg.py
• https://www.vulncheck.com/advisories/igel-os-12-11-boot-registry-parameter-injection-via-unsigned-configuration-area

No related operational record is retained in the current change model.