News
Code‑Execution Flaw in UEFI Firmware Affects Most Servers
A 16‑year‑old buffer overflow (CVE‑2026‑97631, CVSS 9.5) in TianoCore EDK2’s PXE Base Code driver allows ring 0 code execution via oversized ICMP errors during network boot. Fixes leaked early; mitigation includes patching firmware and disabling PXE where possible.