Critical UEFI Firmware Flaw Could Expose Millions of Servers to Pre-Boot Code Execution
A critical bug in open-source EDK II firmware lets a remote attacker run code on a machine before the operating system starts. The flaw is tracked as CVE-2026-97631. It sits in the network boot (PXE) driver and received a CVSS v4 score of 9.5. The advisory lists the NetworkPkg package in EDK II...