Code-execution flaw in UEFI firmware threatens most servers on planet Earth
Summary
Ars Technica reports a critical firmware vulnerability CVE-2026-97631 in the EDK2 UEFI boot firmware that enables code execution early in the boot process via the PXE network path. The flaw undermines the chain of trust and can bypass Secure Boot and TPM protections, potentially enabling attackers to run code with high privileges before the OS loads. Patch efforts are complicated by the need to update BIOS/UEFI across many devices; mitigations include firmware updates, disabling network boot where feasible, enabling TPM and Secure Boot, and monitoring logs for signs of exploitation.