Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network. UEFI firmware is the software that runs first when a computer is switched on, before the operating system. An attacker who can reach the machine
Get these alerts on XExploits, big breaches and outages, with what to do.
Follow @vulnpulse_app| Source | The Hacker News |
|---|---|
| Fetched | 10/28/2026, 11:02 PM |
| Data | Markdown JSON |
On 10/28/2026, 08:50 PM, The Hacker News published "Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers" (type: Security news). Severity is "Critical" (critical).