Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

October 28, 2026 · 11:50 am 1 sources

Image: The Hacker News

Coverage

More coverage

• Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
  The Hacker News · October 28, 2026 11:50
  A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network. UEFI firmware is the software that runs first…