16-year-old EDK II flaw can run code before Secure Boot on network-booting servers
A buffer overflow in the EDK II PXE driver, tracked as CVE-2026-97631 and rated 9.5, can crash or hijack servers during network boot. No stable patched release exists yet.