On October 28, IT Time Network reported a significant security vulnerability, identified as CVE-2026-97631, within the open-source UEFI firmware project TianoCore EDK II. This flaw, situated in the ICMP component, has been assigned a severity rating of 9.5 due to its potential to cause memory corruption. Malicious actors can exploit this vulnerability by sending specially designed packets during a device's network boot process, triggering memory corruption and disrupting the boot sequence. If attackers possess knowledge of the specific firmware build on the target device, they can further execute arbitrary code before the operating system loads, operating with the highest CPU privilege level.

This vulnerability predominantly impacts devices that boot over a local area network (PXE) with the relevant features enabled. As of now, no real-world attack cases leveraging this vulnerability have been documented. Intel has clarified that its commercial products remain unaffected, while Arm has indicated that the vulnerability does not directly impact its offerings.

Addressing this security concern necessitates device manufacturers to distribute BIOS or UEFI updates. Institutions utilizing servers that could be vulnerable are strongly advised to promptly verify and update their firmware to mitigate potential risks.