Critical flaw in UEFI firmware affects most servers worldwide
A memory-corruption flaw in the ICMP component of the TianoCore EDK II codebase, tracked as CVE-2026-97631, carries a severity rating of 9.5 out of 10. The code is used by nearly all UEFI suppliers, including AMI, Insyde and Phoenix, and can let attackers run malicious code before the OS and Secure Boot defenses take effect.
