Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
A buffer overflow in EDK II's PXE network-boot code, tracked as CVE-2026-97631 and rated 9.5 out of 10 by TianoCore, lets an attacker send one crafted ICMP error message longer than 504 bytes to overwrite memory during a network boot, with no password or...