Critical UEFI Flaw Exposes Millions Of Servers To Hijacking Threat

A newly-revealed UEFI exploit has entered the public sphere as CVE-2026-97631, and since it targets the TianoCore EDK2 open source codebase used by virtually all major manufacturers for their servers' UEFI firmware, enterprise and datacenter

clouddevhardwaresecurity

Sources

Vulnerabilities

Why this score
Signals contributing to the severity score
SignalPoints
cvss critical — 9.520