Security AlertCritical
UEFI boot flaw could let attackers run code before Secure Boot
Oct 28, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
A critical flaw in EDK II, tracked as CVE-2026-97631, can let an attacker run code during network boot. It affects server and data-centre systems that boot over the network.
Key points
- The flaw is rated 9.5 out of 10.
- It affects EDK II, used by many UEFI firmware makers.
- No stable fixed release of EDK II is available yet.
Why it matters
For businesses with network-booting servers, this is a pre-boot risk, not just an operating system problem. It could let an attacker tamper with boot-time defences.
Who’s affected: Network-booting servers and data-centre equipment
What to do
- Check whether your servers use network boot.
- Watch for firmware updates from your vendor.
- Treat the flaw as an adjacent-network risk for server environments.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.