Anthropic and Google researchers find a UEFI flaw hitting most servers
CVE-2026-97631 in TianoCore EDK II allows a hijack during network boot. About 4,299 likes.
Researchers from Anthropic and Google found a flaw where one crafted network packet can hijack a server during network boot, before Secure Boot checks the operating system, according to International Cyber Digest.
The bug, CVE-2026-97631, is in TianoCore EDK II, the open-source UEFI firmware code used in most servers. The post says "almost all servers on earth are affected."
Why it mattersFirmware attacks run below the OS, where usual defenses can't see them, and patching firmware across huge server fleets is slow.
