•SiTech AI Team
Code-execution flaw in UEFI firmware affects most servers
A memory-corruption flaw in EDK2's ICMP parser, tracked as CVE-2026-97631, can let attackers run code before the operating system loads and before firmware enforces defenses such as Secure Boot, on servers that boot from a local network.