CVE-2026-97631: Critical UEFI PXE Flaw Enables Pre-Boot Code Execution on Servers
A critical buffer overflow in TianoCore’s EDK II firmware codebase allows an unauthenticated, remote attacker to execute code before the operating system loads, bypassing Secure Boot and measured boot protections. Tracked as CVE-2026-97631 and rated 9.5 out of 10 for severity, the flaw resides in the PXE network boot driver and affects both IPv4 and … Read more