UEFI flaw CVE-2026-97631 exposes servers worldwide to ring-0 code execution

HeadFlash Security · Oct 30, 2026 · 5m

A 16-year-old buffer overflow in TianoCore EDK II PXE code scores 9.5 and touches most server vendors, plus Cisco SD-WAN malware and GRU sabotage.

Sources:

Code-execution flaw in UEFI firmware affects most servers on planet Earth - Ars Technica

Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

GRU-Backed Hackers Burst Water Mains and Sparked Factory Fires From Denmark to California

Microsoft Authenticator for Android: The 'Confused Deputy' That Handed Corporate Tokens to Any App | DeafNews

Keystone to Destroy 18,835 Hardware Wallets After Authentication Key Theft

📰…