Critical UEFI Firmware Flaw Allows Attackers to Execute Code Before Windows or Linux Boots
A critical vulnerability in EDK II’s PXE network boot implementation could let unauthenticated attackers run arbitrary code before Windows or Linux loads. Tracked as CVE-2026-97631, the flaw affects ICMP error handling in the NetworkPkg PXE Base Code driver during IPv4 and IPv6 network boot. The advisory identifies the EDK II master as affected as of […] The post Critical UEFI Firmware Flaw Allows Attackers to Execute Code Before Windows or Linux Boots appeared first on Cyber Security News .
Continue on CyberPress ↗ ‹ All news Get the newsletter
The summary and image come from CyberPress; the image is shown from their website.