Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

vulnerability

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

A 16-year-old vulnerability in EDK II, the code used to build UEFI firmware, allows an attacker to run code before the operating system loads during network booting. While a fix exists, it hasn't been integrated into sta…

The Hacker News · 2d ago HighCVSS 9.5

CVE-2026-97631 uefi network boot buffer overflow

vulnerability

In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak

The article also covers a ransomware group using AI to automate attacks and a grey-market service facilitating the use of AI tools for malicious purposes.

SecurityWeek · 20h ago HighCVSS 9.5

CVE-2026-97631 FR IR KP cybersecurity vulnerability ransomware

news.mlab.sh

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak