Tag: uefi firmware

UEFI Firmware Exposes Servers to Code Execution Before Secure Boot

A 16-year-old vulnerability in EDK II's UEFI firmware, known as CVE-2026-97631, leaves servers exposed to code execution before Secure Boot even kicks in, allowing attackers to interfere with or run code on machines during network boot. This flaw can be triggered by a simple 504-byte overflow in the PXE driver, enabling malicious code to overwrite nearby memory and wreak havoc.