## Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

- 種別: news
- 重大度: critical
- 公開日時: 2026-10-28T11:50:00.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/critical-16-year-old-uefi-flaw-can-run.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-9590ed7a40f8

A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network. UEFI firmware is the software that runs first when a computer is switched on, before the operating system. An attacker who can reach the machine