CVE-2026-97631: Pre-boot RCE in EDK II PXE driver

Summary by Cyber Security News28 Oct 2026, 14:58 CET

About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/411

Posted by Valtteri Vuorikoski on Oct 28 Ars Technica reported on this yesterday so let's have it here too. Copied from the advisory on the edk2 repo: Summary While a machine is PXE-booting over IPv4 or IPv6, an unauthenticated network attacker who can deliver ICMP error...

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.