CERT24Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting ServersLoading data…
CERT24Threat Observatory
Period

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

Critical vulnerability CVE-2026-97631 in EDK II UEFI firmware code may allow an attacker to execute code during PXE network boot before the operating system, Secure Boot, and other boot-time checks load. The flaw is rated 9.5 out of 10. The source reports no evidence that it has been used in attacks.

← Back to intelligence

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

Critical vulnerability CVE-2026-97631 in EDK II UEFI firmware code may allow an attacker to execute code during PXE network boot before the operating system, Secure Boot, and other boot-time checks load. The flaw is rated 9.5 out of 10. The source reports no evidence that it has been used in attacks.