Code-execution flaw in UEFI firmware affects most servers on planet Earth

A critical vulnerability, CVE-2026-97631, has been discovered in the TianoCore EDK II, a widely-used open source codebase for UEFI firmware, allowing attackers to execute malicious code early in the boot process. This flaw resides in an ICMP component and can be exploited to run payloads before Secure Boot and TPM can be implemented, potentially allowing attackers to install additional payloads. The vulnerability has a severity rating of 9.5 out of 10 and affects virtually all UEFI suppliers, including AMI, Insyde, and Phoenix, as well as Microsoft's Project Mu.