arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth Code-execution flaw in UEFI firmware affects most servers on planet Earth
A critical memory-corruption flaw, CVE-2026-97631, rated 9.5 out of 10, sits in the PXE network-boot driver of the open source TianoCore EDK II used to build UEFI firmware. It enables pre-OS code execution, but an attacker needs local network access, and patches must be deployed through firmware updates.
— via Ars Technica, Dan Goodin
