Critical UEFI Firmware Vulnerability Affects Global Server Infrastructure

A critical vulnerability in the TianoCore EDK II open-source codebase has been identified, posing a significant security risk to data centers globally. Tracked as CVE-2026-97631, the flaw carries a severity rating of 9.5 out of 10 and resides in an ICMP component within the UEFI firmware used during server initialization.

The vulnerability allows attackers to execute unauthorized code before security features such as Secure Boot and Trusted Platform Modules can establish a chain of trust. Because major independent BIOS vendors including AMI, Insyde, and Phoenix rely on EDK II, the reach of this vulnerability spans a vast majority of server hardware currently in operation.

While the initial exploit does not achieve persistence, it provides an entry point for attackers to install deeper-level payloads that trigger during each subsequent boot sequence. Remediation requires firmware updates from hardware manufacturers, as patching the underlying reference code remains a complex challenge for the industry.