CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers

October 28, 2026 Yanac

CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2026-97631 (CVSS score of 9.5), in the firmware that boots most of the world’s servers is now public, and the patch details came out months early. The bug affects TianoCoreSecurity AffairsRead More