Critical UEFI Flaw CVE-2026-97631 Threatens Millions of Servers

A newly disclosed UEFI exploit, tracked as CVE-2026-97631, targets the TianoCore EDK2 open source codebase used by virtually all major manufacturers for server UEFI firmware. The flaw exposes enterprise and datacenter servers to hijacking.

• The vulnerability is tracked as CVE-2026-97631
• It affects the TianoCore EDK2 codebase
• EDK2 underpins firmware from nearly all major vendors
• Enterprise and datacenter servers are at risk