Features
- Findings grid: risk-factored columns hidden: KEV, EPSS, and EMS no longer appear as separate columns by default, since Risk Score already factors them in.
- Global findings grid: data varies by finding type: The global findings grid now shows more relevant data for each finding based on its type.
- Images grid: default sort by version: Images now sort by version, then upload date, instead of upload date alone.
- Images grid: multi-column sorting: Sort images by up to 5 columns at once, matching the findings grid.
- Faster scan finalization: Scans finish processing more quickly.
Binarly Analysis Engine
- New Platforms/Formats
- The platform now extracts U-Boot environment data from firmware images.
- The platform now unpacks Linux kernel ELF components (
vmlinux) for downstream analysis. - VulHunt now detects vulnerabilities within Linux kernel ELF binaries. Firmware containing Linux kernel ELF components may take longer to scan.
- Vulnerability Database Service
- Added RedHat as a vulnerability data source.
- New Context-Aware Rule Detection (VulHunt, Mitigate)
- Added VulHunt detection for CVE-2026-43499 (GhostLock) in Linux kernel ELF files.
- Added a Mitigate check for U-Boot images where the
bootdelayconfiguration leaves the boot console accessible without authentication (CWE-306, CWE-489, CVSS 7.6).
- Analysis Framework Enhancements
- Environment Reachability and Code Reachability are now permanently enabled for all platform instances. The rollout flag that previously gated these findings grid columns has been removed.
Bug Fixes
Reports
- N/A formatting: N/A now displays consistently in uppercase in reports.
Platform
- Version button display: The version button now shows the release date by default instead of the full version string, which could overflow.
- Dashboard TIM widget: Fixed a display issue with the TIM widget on the Dashboard.