CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers

Reported by Security Affairs (Pierluigi Paganini)

Summary by Cyber Security News28 Oct 2026, 12:15 CET

About this summary. This is a short excerpt from the description that Security Affairs published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://securityaffairs.com/201928/security/cve-2026-97631-16-year-old-uefi-flaw-threatens-servers.html

CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers — Image: Security Affairs

CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2026-97631 (CVSS score of 9.5), in the firmware that boots most of the world’s servers is now public, and the patch details came out months early.

Read the full article at Security Affairs →

Source attribution: headline and facts are from Security Affairs (securityaffairs.com). Summary method: excerpt of the source description. See our source attribution policy.