Critical UEFI Firmware Flaw Could Expose Millions of Servers to Pre-Boot Code Execution

A critical bug in open-source EDK II firmware lets a remote attacker run code on a machine before the operating system starts. The flaw is tracked as CVE-2026-97631. It sits in the network boot (PXE) driver and received a CVSS v4 score of 9.5. The advisory lists the NetworkPkg package in EDK II master as…

Abbreviated excerpt as provided by the publisher; the full article is at the canonical source. Attributed to Cyber Security News · Limited verification; verify facts against the linked source. Read the full article on cybersecuritynews.com.

Source published: 28 Oct 2026, 08:06 AM IST. Source facts take precedence over AI interpretation.