Code-execution flaw in UEFI firmware threatens most servers on planet Earth
A code-execution vulnerability rated 9.5 out of 10 has been found in TianoCore EDK II, the open-source reference code that hardware makers and cloud providers use to build UEFI firmware for the boot sequence. Virtually all UEFI suppliers, including AMI, Insyde and Phoenix, use the reference code extensively, leaving defenders at most server vendors and data centers facing a broad fix-up effort. It matters because a flaw in boot-time firmware sits below the operating system, so it is both widely exposed and unusually hard to remediate.
SOURCES
- Ars Technica2026-10-27 20:25