arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth Code-execution flaw in UEFI firmware threatens most servers on planet Earth
A 9.5-severity memory-corruption flaw, CVE-2026-97631, in TianoCore EDK II's PXE network-boot driver lets attackers on a local network run code before Secure Boot and TPM defenses load. A premature public patch ended the planned disclosure embargo, and vendors have yet to detail which products are affected.
— via Hacker News (top 30), DamnInteresting
