⛓️‍💥 CVE-2026-97631: Firmware of "most servers" can be hijacked by a single crafted packet during network boot, before Secure Boot checks the OS.

28 Oct, 2026

per X Reader Added Context:
The vulnerability is limited to servers actively PXE network-booting with vulnerable EDK II firmware; most servers boot from local disks and are unaffected in normal use, with Intel noting limited impact on supported products.

‼️ Anthropic and Google researchers found a flaw that lets one crafted packet hijack a server during network boot, before Secure Boot checks the OS.

Almost all servers on earth are affected.

CVE-2026-97631 sits in TianoCore EDK II, code in the UEFI firmware of most servers. https://t.co/YhFc3ZATfy

— International Cyber Digest (@IntCyberDigest) October 28, 2026