SPOJENO PŘES CVE Pre-boot RCE in EDK II PXE driver (Code-execution flaw in UEFI firmware)
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.5, CVEs: CVE-2026-97631, Summary: The vulnerability, with a severity rating of 9.5 out of 10, resides in the TianoCore EDK II, an open source codebase that hardware makers and cloud providers use to create the UEFI firmware that runs during the boot-up sequence. Last year, a representative of the UEFI Forum called EDK2 the “preeminent solution / implementation of the UEFI specifications.” Virtually all…
EPSS 0.00 CVSS 9.5 CVE-2026-97631 TianoCore Microsoft AMI Insyde FI IT